Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)

Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)
A . FortiGate uses the AD server as the collector agent.
B . FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
C . FortiGate does not support workstation check .
D . FortiGate directs the collector agent to use a remote LDAP server.

View Answer

Answer: A B

Explanation:

In agentless polling mode, the FortiGate itself communicates directly with the Active Directory (AD) servers. The FortiGate unit can use the SMB (Server Message Block) protocol to read the security event logs of the AD servers to track user logons and logoffs. The FSSO (Fortinet Single Sign-On) doesn’t use a separate agent in this mode, hence the term ‘agentless’. Please note that not all environments or AD configurations support this mode, and it may not offer the same level of detail or functionality as using a dedicated FSSO agent.