The Fortinet Single Sign-On (FSSO) Collector Agent supports three primary methods for Active Directory (AD) polling to collect user information:
* WinSecLog: Monitors Windows Security Event Logs for login events.
* WMI: Uses Windows Management Instrumentation to poll user login sessions.
* NetAPI: Utilizes the Netlogon API to query domain controllers for user session data.
These methods allow the FortiGate to gather user logon information and enforce user-based policies effectively.
References:
* FortiOS 7.4.1 Administration Guide: FSSO Configuration