Technical Tip: Identifying Registry value of IPS engine version check on Windows Endpoints with ZTNA Tags
| Description | This article describes how to detect the registry value of the IPS engine version check on a Windows endpoint by using the ZTNA tag. |
| Scope | FortiClient, FortiClient EMS v7.4. |
| Solution | Go to FortiClient EMS -> Security Posture Tags -> Tags and select 'Create' to create a new ZTNA tagging rule.
Go to the endpoint machine, under registry location: 'Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FortiClient\FA_FW' and find out the current engine version.
ZTNA Tag Logic is shown as below:
Save this creation, and the result comes out as shown in the screenshots below.
EMS:
FortiClient:
|
