Poll AD Server

Forum|Forum|2 years ago
July 3, 2024
9 replies
2942 views

Hello, I'm trying to setup agentless fsso polling mode.

I want to know, what permissions is required for user which is connecting to active directory?

and also want to know, if this method is good to setup firewall policies per AD user/groups.

Liza1

Explorer II

Hi, I'm having a problem with this configuration. Does anyone know which permissions are required for a user to connect to Active Directory?

Liza1

Explorer II

do the FSSO need additional license? or can it work on a device without license?

Yurisk

SuperUser

No, you don't need any additional license for FSSO, just regular FortiCare for your Fortigate so that you can download FSSO Agent install .msi from support.fortinet.com

yurisk.info - all things Fortinet blog, no ads

Yurisk

SuperUser

Formally, the user just needs membership in "Event log readers" group, i.e. be able to read AD Event Logs.

In general, direct polling is OK in small deployments - dozen or so PCs, the larger the AD the less reactive it becomes. From my experience, all clients that started with direct polling eventually switched to FSSO Agent based polling, just saves lots of head ache in the long run.

yurisk.info - all things Fortinet blog, no ads

lrazmadzeAuthor

New Member

I think so, use the FSSO to avoid extra cpu and ram usage on my fortigate.

do the FSSO need additional license? or can it work on a device without license?

Yurisk

SuperUser

No, you don't need any additional license for FSSO, just regular FortiCare for your Fortigate so that you can download FSSO Agent install .msi from support.fortinet.com.

yurisk.info - all things Fortinet blog, no ads

Sign up

Login with SSO

Login to the community

Login with SSO