You are configuring FortiAuthenticator to integrate with FSSO for user identification. To enable FortiAuthenticator to extract user information from syslog messages and inject it into FSSO, you have…

Question

Options

• ATo automatically update user group memberships in FSSO based on syslog events
• BTo enforce user authentication policies based on syslog message contents
• CTo define how syslog messages are parsed and extract user information, such as usernames and
• DTo filter and block irrelevant syslog messages from being processed by the FortiAuthenticator

• A
  17% (6)
• B
  8% (3)
• C
  72% (26)
• D
  3% (1)

Explanation

When FortiAuthenticator is used as anFSSO agentbased onsyslog, it must: Parse incoming syslog messagesfrom devices (firewalls, WLAN controllers, VPN concentrators, Extract identity fieldssuch as: Login/logout event indicators Syslogmatching ruleson FortiAuthenticator define: Which syslog messages are relevant (by facility, message pattern, or regex). How to capture specific fields (username, IP, group, event type). FortiAuthenticator then uses this parsed data toinject logon sessions into FSSO, so FortiGate can apply identity-based policies. Thus, the role of syslog matching rules is exactly as described in C.

No community discussion yet for this question.