Skip to main content
Jahirul Islam
Visitor III
July 14, 2026
Question

FortiClient EMS deployment for Airgap and internet facing client

  • July 14, 2026
  • 2 replies
  • 44 views

Hello,

We have an environment consisting of 100 endpoints. Approximately 70% of the endpoints are located in an air-gapped environment. To manage these endpoints, I have deployed FortiClient EMS version 7.4.7 in air-gapped mode, as there is no Internet connectivity within this network.

The remaining 30% of the endpoints are located in a separate Internet-facing environment. These endpoints do not have connectivity to the air-gapped network, and similarly, the endpoints in the air-gapped network cannot communicate with the Internet-facing environment.

Currently we have deployed FortiEMS in air-gap mode and air-gap connected endpoints are already connected. Now facing issue to connect internet facing endpoints.

In this scenario, how can I manage the Internet-facing endpoints using FortiClient EMS?

Additionally, is it possible to deploy a second FortiClient EMS instance under the same subscription to manage these endpoints separately?

Environment Details:

  • FortiClient EMS Version: 7.4.7
  • Total Endpoints: 100
  • Air-gapped Network: 70 endpoints (no Internet connectivity)
  • Internet-facing Network: 30 endpoints
  • There is no network connectivity between the two environments.

2 replies

Stephen_G
Staff & Editor
Staff & Editor
July 17, 2026

Hi Jahirul Islam,

 

Thank you for using the Fortinet Community. We will seek to find you an answer or help.

Stephen_G - Fortinet Community Team
AEK
SuperUser
SuperUser
July 17, 2026

Hi Jahirul

The only solution I see is that you deploy a second EMS with its own subscription.

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!