FSSO Collector Agent Log says "error parsing file...TSAgentSyncID.dat"

[jiangchundi]

I have one 200D (on 5.4.10), FSSO seems work well, but Collector Agent keeps logging following message:

"error parsing file header:C:\Program Files (x86)\Fortinet\FSAE\TSAgentSyncID.dat"

Is there something I should worry about?

I have installed both Collector Agent and DC Agent on two DCs (Win2012 R2) under Domain\Administator account. I have set full control permission to "Authenticate User" toward Fortinet folders and registries.

Thanks a lot.

[xsilver_FTNT]

Hi,

looks like permission issue.

Try to run Collector Agent  service under Domain Admins group member account to test it.

If you do run service under restricted account, then make sure that account has full privilege on FSAE folders and registry keys (including sub-tree and folders).

[jiangchundi]

Thank you for your reply.

This is weird. The Fortinet Single Sign On Agent Service is running under the Domain\Administrator account, which is a member of Domain Admins group. And Domain Admins,Domain Users, and even Authenticated Users have Full Control permission to the following folder and registry keys, including sub-folders and sub-tree:

C:\Program Files (x86)\Fortinet\FSAE

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Fortinet\FSAE\collectoragent

 C:\Program Files\Fortinet\FSAE

HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FSAE\dcagent