Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)
A . FortiGate points the collector agent to use a remote LDAP server.
B . FortiGate uses the AD server as the collector agent.
C . FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
D . FortiGate queries AD by using the LDAP to retrieve user group information.

View Answer

Answer: B C

Explanation:

In Fortinet Single Sign-On (FSSO) agentless polling mode, FortiGate directly communicates with the Active Directory (AD) server. It uses the SMB (Server Message Block) protocol to read the security event logs from the Domain Controllers (DCs) to track user logons and logoffs. It doesn’t point the collector agent to use a remote LDAP server nor does it directly query AD using LDAP to retrieve user group information in this mode.