VPN ssl configuration

[unknown1020]

Hello friends, a question, in the fw we have the configuration of the ssl vpn which the users are authenticated.

However, it is planned to change the server where the ad is located. When performing this action, the collection agent must be installed on the new server? https://docs.fortinet.com/document/fortigate/6.4.2/administration-guide/795593/use-active-directory-...

[dbu]

Hi, 
Yes you are right. If you have changed the AD server than you need to install an agent on the new one so it can pull the information.

[ggolubovic]

Hello unknown1020,

when you said "collection agent" you mean collector agent ?

Collector agent is a Windows service which can be installed on any Windows server who have access to AD. So if you change AD who will authenticate vpn auth.requests, you just need to reconfigure Collector Agent to monitor new AD also.