An administrator suspects that the Collector Agent is not forwarding login events to FortiGate.

Verify if DC agent is enabled on the FortiGate.

Restart the domain controller to refresh authentication services.

Verify if FortiGate is set to use LDAP authentication instead of FSSO.

Check if TCP port 8000 is open between the collector agent and FortiGate.