FSSO Agentless mode

Forum|Forum|9 years ago
October 28, 2016
2 replies
11275 views

Hello,

I have a question regarding to agentless polling mode. I know that in Polling mode the collector agent is installed on Windows Sever. However in Agentless polling mode the Fortigate could directly polls the AD domain controller?

Best regards,

xsilver_FTNT

Staff

Hello,

yes, as you might found from documentation, FortiGate can poll AD directly.

However I would consider this as entry level of FSSO as it does WinSec polling only without any NTLM fallback possibility or workstation check. Capabilities of this Collector built-into FortiOS are limited.

Good for small/single domain with few users or test environment.

I would not recommend it for bigger domains/multi-domain environment or for more ADs and users than a hand full.

Best regards,

Tomas

burim

New Member

xsilver wrote:
Good for small/single domain with few users or test environment.

Is this something based on your personal experience with fortigate sso or is it official from Fortinet as well? I am asking this because we are about to implement a big project that involves more then 20.000 users with two level child domains.

Thank you.