NSE 8 – Network Security Expert (811) — Question 38

You have deployed a FortiGate in NAT/Route mode as a Secure Web Gateway with a few IP-based authentication firewall policies. Your customer reports that some users now have different browsing permissions from what is expected. All these users are browsing using Internet Explorer through a Remote Desktop
Connection to a Terminal Server. When you look at the FortiGate logs, the username for the Terminal Server IP is not consistent.
Which action will correct this problem?

Answer options

• A. Change the FSSO Polling mode to Windows NetAPI.
• B. Configure FSSO Advanced with LDAP integration.
• C. Install the TS/Citrix agent on the terminal server.
• D. Make sure the Terminal Server is using the correct DNS server.

Correct answer: C

Explanation

Installing the TS/Citrix agent on the terminal server is essential for accurate user identification in environments using Remote Desktop Services. Without this agent, the FortiGate cannot consistently associate users with their sessions, leading to incorrect permissions. The other options do not directly address the inconsistency in user identification related to Terminal Server sessions.