Erro Fortinet Single Sing On Agent Configutation

[Marcos_FDS1012]

After an update to my Windows Server 2022, Fortinet Single Sing On Agent Configutation stopped retrieving Show Logon Users information, is there any way to find out how to solve this?

[ebilcari]

What is the version of the collector agent (Show Service Status)? Was this server update done after a long time or it's updated frequently and this is a recent update? Does this setup has also DC agents installed?

[Marcos_FDS1012]

Hello ,
The version would be this Fortinet Single Sign On Agent for Windows AD Online Help Version 4.3
And an update of the day 14/06/2024 and another 15/06/2024

[ebilcari]

The Agent version can be checked here:

If the agent version is that old you should try to update it as shown here.

[Marcos_FDS1012]

Sorry, I got the wrong information

[ebilcari]

I did a search internally and there was a similar case with Server 2022 that is solved with agent version: 5.0.0315. You can download this agent in the folder of the latest version of FGT: / FortiGate/v7.00/7.4/7.4.4/FSSO/

[stevessb]

Did updating the agent fix this issue? We also ran into this issue after installing June's Windows updates.

[Marcos_FDS1012]

I haven't updated yet because I need to restart my server, but I'll let you know as soon as I do.

[eihoward]

KB5039217 for Windows Server 2019 (KB5039227 for 2022) contains some lsass.exe patches that appears to affect the agents and collector.  I am waiting for Fortinet to comment on this.  Solution is to remove the patch to restore FFSO funtionality.

[Marcos_FDS1012]

It was the same as my server 2022