Skip to main content
cjp
New Member
January 28, 2016
Question

FSSO Polling mode with two Active Directory

  • January 28, 2016
  • 1 reply
  • 3864 views

Hello everybody,

 

I would like to know if it's possible to connect my fortigate to two different active directory in order to enable authentication for two domains. I've been able to connecte to the second ldap server and create the fsso and select the groups but I can't enable it...

I'm in v5.2.4,build688 and in polling mode.

 

Thanks

    1 reply

    xsilver_FTNT
    Staff
    Staff
    January 28, 2016

    Hello,

    if you are polling directly from FortiGate unit then this is not possible and supported scenario.

    Use standalone FSSO Collector Agent installed either on one DC collecting data for both domains, or two Collectors (one in each domain).

    Kind regards,

    Tomas

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.