Fortinet FSAE - Manual (Page 6)

Fortinet Server Authentication Extension Version 1.5 Technical Note
6 01-30005-0373-20071001
FSAE overview Using FSAE on your network
Figure 1: FSAE with DC agent
In Figure 1 , the Client User logs on to the Windows domain, information is
forwarded to the FSAE Collector agent by the FSAE agent on the domain
controller, and if authentication is successful, the information is then sent via the
collector agent to the FortiGate unit.
Figure 2: NTLM FSAE implementation
In Figure 2 , the Client User logs on to the Windows domain. The FortiGate unit
intercepts the request, and requests information about the user login details. The
returned values are compared to the stored values on the FortiGate unit that have
been received from the domain controller.