FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
vkulik
Staff
Staff
Article Id 190402

Description
Sometimes it is necessary to change the Collector Agent IP or reassign Dcagent to another Collector agent due to network topology or AD changes.

Scope
FSAE
Solution
1. It's possible to push DCagent from another Collector agent. The drawback of this approach is that old Collector agent IP still stays in registry and if original Collector agent will be alive then same Dcagent will be monitored by both Collectors which may not be desirable. If the original Collector agent IP will be removed from network or reassign to other device then there is a chance that DCagent will try to push update to non existent IP address.

2. More flexibility is allowed if modification done from registry
Run regedit on DCagent

  • Open [HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FSAE\dcagent\ca] key
  • Note existing entry pointing to original Collector agent

dcagent4.png

  • To point it to new IP,  rename existing entry and specify new IP.
  • To monitor same Dcagent from two or more Collecotr agents, create similar entry for each Collector Agent IP and Dcagent will push updates to all listed IPs.

 

  • dcagent5.png


NOTE: The value for each parameter is the same. By default, UDP/8002 port is used for communication between the Collector Agent and DCagent. Edit each added parameter, switch to Decimal and type 8002.

dcagent6.png

NOTE: There is no need to reboot DC where DCagent was installed to apply registry changes.



Contributors