We are using two ASG425's in HA mode.
Firmware: 8.102
Patternversion: 21617
I'm trying to implement some sort of access pattern based on a AD SSO authentification.
Therefor I've configured at least four http/s profiles.
Every profile has it's own filter assignment including a specific AD user group.
As the filter assignments the profiles itself have been configured with the matching "User Group Network" object.
But every time I try to get access with the correct user (SSO), it won't work.
For some reason the http/s log shows me that the client is using the standard profile, eventhough it does recognize the correct user and the ip is recognized too at least it does show in src ip="...".
If I replace the "network group" definition within the profile to "internal network" and leave the user group as it was, it does work.
The problem here is, as soon as I use the wrong user, the client wont go to the next profile in list, it just stops there and uses the fallback configuration.
Which means all the other profiles will be ignored except the firt profile in the list.
What am I doing wrong?
Can some give me a hint.
Does the "User Group Network" object work within the web security option?
This thread was automatically locked due to age.
