| FortiPAM with FortiClient relies on FortiVRS for video recording. For more information about the FortClient Side process can refer to the below KB article: Troubleshooting Tip: General Client-side Debugging Tips/Info By default, FortiVRS logs are not enabled. To enable logging for the FortiVRS process, configure on FortiEMS if FortiEMS is in use or edit manually on the FortiClient config file. Option 1: Configure on FortiEMS. - Go to Endpoint Profiles -> System Settings. Select the profile that the FortiClient applied with. Example here uses the 'Default' profile.
- Select the XML tab on the top right corner, and look for lines below:
<level>x<level> <log_events>av,sslvpn…..<log_events> - Ensure the level is set to 7 and PAM is included in the events entry.
<level>7<level> <<log_events>av,sslvpn…..,pam<log_events> - Save the setting.
- Wait for the FortiClient to sync with EMS, and the configuration on FortiClient will be updated.
Option 2: Edit the FortiClient config file. - On FortiClient, go to settings and back up the config file.
- Open the config file with a text editor such as Notepad++. Look for the same line as in the first option. Ensure the level is set to 7 and PAM is included in the events entry.
<level>7<level> <<log_events>av,sslvpn…..,pam<log_events> - Save the setting. After that, restore the saved configuration to FortiClient.
- To verify that the logs are enabled, go to the path: FortiClient Installation Path\logs\trace. For example, the default installation path is C:\Program Files\Fortinet\fortiClient\logs\trace. Under the trace folder, FortiVRS files will show some logs if the debug is enabled successfully.
FortiClient PAM Agent Deployment: Deployment with FortiClient PAM agent setup, the option to export the configuration file is not available, as there is no FortiClient GUI. FortiClient PAM agent only consists of the software version information in the GUI console: 
 Iit is required to use the FCConfig tool to export the configuration file before following the instructions in option 2 to configure the logging for FortiVRS and set the log level to debugging mode. Follow the steps below to download and upload the configuration file for FortiClient PAM agent setup: - Open the command prompt with administrator access and navigate to the FortiClient installation path:
- Windows: C:\Program Files (x86)\Fortinet\FortiClient
- MacOS: /Library/Application Support/Fortinet/FortiClient/bin
- Issue the command to export the configuration file: FCConfig -m all -f <filename> -o export -i 1 -p <encrypted password>
- Ensure that the user has write permission to the destination folder.
- For example: C:\Program Files\Fortinet\FortiClient>FCConfig.exe -m all -f C:\Users\fortinet.win11pro\Desktop\Backup3.conf -o export -i 1 -p fortinet
- Modify the log level and log event option as stated in Option 2: Edit the FortiClient config file.
- Issue the command to import the configuration file: FCConfig -m all -f <filename> -o import -i 1 -p <encrypted password>
- For example: C:\Program Files\Fortinet\FortiClient>FCConfig.exe -m all -f C:\Users\fortinet.win11pro\Desktop\Backup3.conf -o import -i 1 -p fortinet
Once restored, the FortiClient PAM agent will start to save logs for FortiVRS in debugging mode: 
| 
