Redundant LDAP Servers - FSSO

[quevedo_lopez]

Hi,

I need to configure a FSSO with a redundancy on LDAP servers, a second server of AD for Failover.

Thanks in advanced.

[xsilver_FTNT]

Hi,

how about to have one FSSO Collector agent installed on first DC, asking local LDAP. Plus second FSSO Collector on second DC also asking local LDAP. And then have those two Collectors in one FSSO Agent setting in FortiGate. So when one Collector became unreachable then second one will be used until it fails as well.

So when local LDAP on any of DCs fail, then local collector will fail most probably as well as DC will be in more serious troubles then Collector not running.

This is usual scenario for FSSO resilience.

[jimzky1026]

Try to open this link and follow instructions...

https://kb.fortinet.com/k....do?externalID=FD39911

[scerazy]

Yes, that is the "normal" working setup