Technical Tip: FortiClient EMS Cloud and FortiGate must be in the same client account to work

Devices from FortiGate and FortiClient EMS need to be in the same client account to function properly together.

Because the two devices work together in a tightly integrated system and the FortiGate firewall depends on the setup and control offered by the FortiClient EMS, this requirement is crucial.

• The firewall can enforce security regulations, including VPN access, endpoint management, and other security measures when FortiGate is coupled with FortiClient EMS, which is used to manage FortiClient endpoints. A unified security strategy is provided by having both devices under the same client account, which guarantees that the configuration synchronizes smoothly on both ends.
• The client account ensures that all rules, security settings, and logs are consistent between the two devices and enables EMS to push configurations straight to FortiGates. Configuration management and policy enforcement may not be in sync if they are in separate client accounts, which could result in security flaws.
• Keeping both devices within the same account simplifies issue resolution since support services can access both FortiClient EMS and FortiGate configurations within the same environment, improving diagnostics and troubleshooting efficiency.
• Separating FortiGate and FortiClient EMS licenses into separate accounts might cause problems with licensing validation, updates, and access to capabilities that are available within a single account structure because these licenses are frequently connected to the client account.

Note:

Support multi-tenant FortiClient Cloud fabric connectors, and having multiple EMS licenses is possible. Using the FortiClient Cloud access key, a FortiGate can connect to a FortiClient Cloud instance belonging to a sub-OU in the same FortiCloud account or a different FortiCloud account. One FortiCloud account can host either FortiClient EMS Cloud or FortiSASE, but not both simultaneously. Read more about this in the following official release notes: Support multi-tenant FortiClient Cloud fabric connectors 7.4.4

How to check and to perform this integration:

This can be done by logging into the Fortinet client portal and checking that both devices appear under the same profile.

Next, configure the EMS settings to align with the FortiGate requirements for VPN, endpoint control, and other policies.

This setup improves network security, ensures consistent policy enforcement, and simplifies management across devices. Additionally, unified technical support is available for any issues that may arise between the EMS and FortiGate.

Related article:

Technical Tip: How to add EMS in fabric connector with FortiGate API Access Key