USG version is V5R1C60 version, ADSSO.exe is for V5R1C80 version. FW cannot see online user information after user login

Issue Description

USG version is V5R1C60 version, ADSSO.exe is for V5R1C80 version. FW cannot see online user information after user login

Handling Process

we login the FW and request test, then we debug on FW to check, find FW can receive the packet from AD server. and check the configuration is fine.

then we check the ADSSOAgent application, found it is set with Enhanced mode.

Root Cause

because of the compatibility problem, USG version is V5R1C60 version, ADSSO.exe is for V5R1C80 version. so just can use the Common mode and need disable the Enhanced Encryption on FW

Solution

after change the Gateway Shared Key mode to common on ADSSOAgent, and disable the Enhanced Encryption on firewall, then the issue was solved.