FSSO in multiple sites

[rezendecs]

In a client with 2 ADs in the HQ and others replicated ADs in branch officess, one in each branch. What is the best scenario regarding the installation and agent configuration? I put a few questions below to illustrate the kinds of questions I have. With two ADs in the HQ the recomendation is install both agents as "Collector Agent" mode?       Install and configure the agents of branches to monitor the location AD only?       Install and configure the agents of branches to monitor all ADs?       Install and configure the agents of branches to monitor only the ADs of the HQ?       Configure fortigates branches pointing only to the local AD where the agent is installed?       Configure fortigates branches pointing to the location AD where the agent is installed and the HQ?              According to the customer the ADs are replicated and authentication of users of each branch is made locally. There is just one domain. Regards, Claudio

[Dave_Hall]

I would think of it in terms of fault tolerance -- the Internet connection to (or at) HQ could fail, local AD could fail, computer with agent installed could fail, etc.  Maybe "Configure fortigates branches pointing to the location AD where the agent is installed and the HQ".