Skip to main content
traghunath
New Member
September 7, 2020
Solved

Configuring Endpoint Control

  • September 7, 2020
  • 1 reply
  • 4537 views

Hi,

Can I configure EMS via my fortigate (300D) or do I need to install the EMS server software?  I am trying to avoid installing the server software.

 

Thanks

 

    Best answer by Yurisk

    Up to FortiOS 6.2 you could register Forticlients to the Fortigate and create some basic profiles on the Fortigate to be pushed to the PCs, like compliance check, av/vuln scan. But starting with 6.2 you cannot - only via EMS server.

    If you have older than 6.2 version, see in the FortiOS reference commands  https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/362768/endpoint-control (configurable in CLI only anyway):

     

    config endpoint-control settings

    config endpoint-control profile

    1 reply

    SecurityPlus
    Explorer III
    September 7, 2020

    I would like to know the answer to this question too.

    Yurisk
    SuperUser
    YuriskAnswer
    SuperUser
    September 8, 2020

    Up to FortiOS 6.2 you could register Forticlients to the Fortigate and create some basic profiles on the Fortigate to be pushed to the PCs, like compliance check, av/vuln scan. But starting with 6.2 you cannot - only via EMS server.

    If you have older than 6.2 version, see in the FortiOS reference commands  https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/362768/endpoint-control (configurable in CLI only anyway):

     

    config endpoint-control settings

    config endpoint-control profile

    traghunath
    New Member
    September 21, 2020

    But do I still need to install the EMS server software or can I configure and register the clients using the fortigate?  This is what I am trying to understand.