Technical Tip: How to change endpoints out of sync threshold when FortiGate loses connection to FortiClient EMS

Usually when the FortiGate is disconnected from Forticlient EMS, the endpoints tags will be marked as out of sync and traffic will be blocked on FortiGate.

The below CLI command will control when FortiGate will consider the endpoint records and host tags as out of sync when FortiGate loses the connection to Forticlient EMS.

Below is the out-of-sync threshold that can be configured from the CLI.

config endpoint fctems
    edit <name>
        set out-of-sync-threshold < 10 - 3600 secs>
    next
end