Skip to main content
jamacouve
New Member
May 4, 2017
Solved

FSSO Not working

  • May 4, 2017
  • 2 replies
  • 7644 views

There are 5 sites IPsec between all of them.

There is a DC at the head office with a collector agent.

I am trying to get FSSO to work between all sites. The fortigate at headoffice has FSSO working correctly however the remote fortigates wont.

I can ping the Head office DC from remote sites but its as if the fortigates cant communicate with the head office DC on port 8000 looking at th debugs :

 

[fsae_server_init_spec:116]: num 1, idx 0, 127.0.0.1:8000 disconnect_server_only[KCM FSSO]: disconnecting _event_error[Local FSSO Agent]: error occurred in read: Connection refused

 

 

All policies do not have specific ports configure(all ports allowed)

The Windows firewall on the DC is turned off.

Please help

    Best answer by EMES
    https://travelingpacket.com/2015/12/16/fortigate-fsso-and-ldap-source-ip/ Maybe the source ip needs to be set for the fsso session.

    2 replies

    EMES
    EMESAnswer
    New Member
    May 4, 2017
    https://travelingpacket.com/2015/12/16/fortigate-fsso-and-ldap-source-ip/ Maybe the source ip needs to be set for the fsso session.
    jamacouve
    jamacouveAuthor
    New Member
    May 4, 2017

    Eugene.milon wrote:
    https://travelingpacket.c...so-and-ldap-source-ip/ Maybe the source ip needs to be set for the fsso session.
    This was it thank you

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT