Configuring a profile to allow or block endpoint from VPN tunnel connection based on the applied sec

Forum|Forum|1 year ago
October 30, 2024
1 reply
1375 views

Dear,

Following the guide (https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/701440/configuring-a-profile-to-allow-or-block-endpoint-from-vpn-tunnel-connection-based-on-the-applied-security-posture-tag) i'm trying to create rules in order to block for i.e:endpoint with critical vulnerabilities to connect vpn.

But in my console i do not have the option like showing in the link:

Link console:

My console:

FortiClient EMS

Best answer by bfig90

I found it. In the new console version 7.4.0 the option is this one, after you have created the rule logic:

johnathan

Staff

That document references a 'security posture tag', which needs to be configured first before it is selected. You can make it by following this guide:
https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/142/adding-a-security-posture-tagging-rule-set

Never trust a computer you can't throw out a window.

bfig90Author

Explorer

I understand. I followed the link and i learned that i can create 2-3 ore more rules in one. But still i cannot find how to apply this rule in order to say that if EndpointXY is not fulfilling this conditions do not connect

johnathan

Staff

I would rewrite the rule to only apply the tag to the client if they are meeting your requirements. You can then only allow the user to connect if that tag is there.

Never trust a computer you can't throw out a window.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded