Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 2 of 105
Free Preview · 105 of 350 · questions 1–105 of 350 are free. Sign up free to sync your progress across devices.
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
"FortiGate uses the SMB protocol to read the event viewer logs" "FortiGate doesn't poll workstation. Workstation verification is not available in agentless polling mode"
Slide 16, Chapter 3 - Fortinet Single Sign-On (FSSO), Course "NSE 4 FortiGate Infrastructure 7.2 Self-Paced" - "FortiGate uses the SMB protocol to read the event viewer logs" - "FortiGate doesn't poll workstation. Workstation verification is not available in agentless polling mode"
Agentless polling mode operates in a similar way to WinSecLog, but with only two event IDs: 4768 and 4769. Because there’s no collector agent, FortiGate uses the SMB protocol to read the event viewer logs from the DCs. In agentless polling mode, FortiGate acts as a collector. It is responsible for polling on top of its normal FSSO tasks but does not have all the extra features, such as workstation checks, that are available with the external collector agent. FortiGate Infrastructure 7.2 Study Guide P.130