Fortigate FSSO with Windows AD - Windows Firewall Settings

Forum|Forum|3 years ago
October 21, 2022
2 replies
1850 views

I'm looking for a definitive list of settings for Windows firewall when using FSSO in common situations:

- Collector Agent running on Domain Controllers: so, Domain Controller Firewall Settings

- Collector Agent running on a separate Windows computer: so, Domain Controller Firewall Settings and Collector Agent Computer Firewall Settings.

- Domain Windows workstation Firewall Settings.

- any others?

Links will be fine of course!

Thanks!

FortiGate

distillednetwork

Explorer II

Here is a list of FSSO firewall ports used based on the service used.

https://docs.fortinet.com/document/fortigate/6.4.0/ports-and-protocols/879117/fsso-fortinet-single-sign-on

aahmadzada

Staff

Would definitely suggest avoid using the build in fsso poller(AD Connector) as it has a lot of limitations and usually used only for test/demo purposes.
FSSO Collector agent on the other side has wide range of settings and flexibility, is scalable and robust compared to the local poller. List of differences can be found here:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FSSO-local-poller-fssod-limitations-compared-to/ta-p/197980?externalID=FD38897

Sign up

Login with SSO

Login to the community

Login with SSO