The Cisco AD Connector securely transmits user and group information to Secure Access, and user logon events to the Cisco DNS Forwarder (Virtual Appliance). Until now, getting logon event information required a connection to a Domain Controller on your network.
The AD Connector (1.13.8+) and the Secure Access identity platform now support connecting to a Windows Event Log Collector as an alternative to a Domain Controller.
Details of how to register and use Windows Event Log Collector for logon events can be found at: https://docs.sse.cisco.com/sse-user-guide/docs/prepare-active-directory-environment