Which three methods are used by the collector agent for AD polling?

The Fortinet Single Sign-On (FSSO) Collector Agent supports three primary methods for Active Directory (AD) polling to collect user information:

WinSecLog:Monitors Windows Security Event Logs for login events.

WMI:Uses Windows Management Instrumentation to poll user login sessions.

NetAPI:Utilizes the Netlogon API to query domain controllers for user session data.

These methods allow the FortiGate to gather user logon information and enforce user-based policies effectively.

References:

FortiOS 7.4.1 Administration Guide: FSSO Configuration