NSE4 · Question #378
Which FSSO agents are required for a FSSO agent-based polling mode solution?
The correct answer is A. Collector agent and DC agents. An FSSO agent-based polling mode solution requires the deployment of both a FortiGate Single Sign-On (FSSO) Collector Agent and DC Agents.
Question
Which FSSO agents are required for a FSSO agent-based polling mode solution?
Options
- ACollector agent and DC agents
- BPolling agent only
- CCollector agent only
- DDC agents only
How the community answered
(50 responses)- A88% (44)
- B2% (1)
- C4% (2)
- D6% (3)
Why each option
An FSSO agent-based polling mode solution requires the deployment of both a FortiGate Single Sign-On (FSSO) Collector Agent and DC Agents.
In an FSSO agent-based polling mode solution, DC Agents are installed on domain controllers to monitor security event logs for user login events, and they forward this information to the central Collector Agent, which then compiles and sends the user-to-IP mappings to the FortiGate.
There is no dedicated 'Polling agent' in the FSSO architecture; the Collector Agent performs polling functions by receiving information from DC Agents.
The Collector Agent cannot function alone to gather user login information from domain controllers; it requires the DC Agents to collect and forward relevant event data.
DC Agents collect login information from domain controllers, but they rely on the Collector Agent to centralize, process, and ultimately send this information to the FortiGate firewall.
Concept tested: FSSO agent-based polling components
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/368297/configuring-collector-agent-mode
Topics
Community Discussion
No community discussion yet for this question.