Skip to main content
fl0at0xff
fl0at0xff
New Member
November 1, 2016
Question

What is the best choice for FSSO

  • November 1, 2016
  • 1 reply
  • 32861 views

Hello,

Which is the best way to use FSSO when I just have one Windows DC ? I saw that it is possible to configure the fortigate only to "query" the AD and nothing has to be installed on the AD. It is a good choice to just install the collector directly on the AD if I just have one AD ? Is the collector useful when there is just one AD ? 

 

Thank you in advance for your responses

1 reply

MikePruett
MikePruett
New Member
November 1, 2016

A single DC you can just make the FortiGate poll the DC and be on your way.

gsarica
gsarica
New Member
November 1, 2016

We have two DC's and use polling mode only, works as advertised.

xsilver_FTNT
Staff
xsilver_FTNT
Staff
November 2, 2016

Direct polling from FortiGate for two DCs, one domain, few users .. is just fine.

If you are going to need NTLM, workstation checks or different polling methods (like utilize WMI), or you will grow your DC base or number of domains, then I would recommend to use standalone Collector Agent on DC (or domain member server, not necessarily DC). If possible I always prefer external Collector for its variability, scale-ability and robustness.

Terms & ConditionsAccessibility statement