Technical Tip: How to change FortiClient download and management ports in FortiClient EMS server

By default, FortiClient EMS will use port 10443 for the FortiClient download URL and port 443 for FortiClient EMS console access. When creating an installer on the FortiClient EMS, the endpoint will use this Download Link to download the .exe or .msi file as the first step in the endpoint upgrade process:

Under FortiClient EMS -> System Settings -> EMS Settings verify the port that is being used, for example:

1. To change ports in FortiClient EMS v7.2.x, manually install EMS via CLI command and define the desired download and remote management port using the following command:

FortiClientEndpointManagement_7.2.x.XXXX_x64.exe ServerHostname=<preferred_host_name> ClientDownloadPort=<HTTP_port_number> RemoteManagementPort=<HTTPS_port_number> 

2. Change the port in FortiClient EMS v7.4.x: It is now running over Linux in the latest FortiClient EMS versions. Use the below command to set the desired port.

Download/File Server Port:

sudo /opt/forticlientems/bin/emscli config set console --fileserver.port=<new_value>

HTTPS Port to access the FortiClient EMS console:

   sudo /opt/forticlientems/bin/emscli config set console --https.port=<new_value>

These commands can be executed after FortiClient EMS installation is complete.

Example in FortiClient EMS v7.4.1:

sudo /opt/forticlientems/bin/emscli config set console --fileserver.port=60443