Technical Tip: How to enable logging on DC Agent (FSSO DC Agent mode)

 https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-enable-logging-on-DC-Agent-FSSO-DC-Agent/ta-p/196857?externalID=FD38825

diag debug enable

diag debug auth fsso server-status

diag debug authd fsso list | grep 

echo %logonserver%

FSSO login in Regedit:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-enable-logging-on-DC-Agent-FSSO-DC-Agent/ta-p/196857?externalID=FD38825

Multithread configured to 10
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Optimization-of-FSSO-workstation-IP-address/ta-p/193257?externalID=FD53276
 

Time to check IP change set in 25 secs.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-FSSO-timers/ta-p/189420?externalID=FD31876

Forticlient (FCT) debug

 Desde el FGT:

diagnose vpn ssl debug-filter src-addr4 x.x.x.x --> donde x.x.x.x es la IP Pública del cliente que realiza la prueba.
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug enable

Desde el FCT:
How to enable debug log in FortiClient v5.0 and later
https://kb.fortinet.com/kb/documentLink.do?externalID=FD38644


Para detener la captura del FGT:
diagnose debug disable
diagnose debug reset