Skip to main content
cpx
Visitor III
July 31, 2023
Question

FortiClientEMS deployment only for selected clients

  • July 31, 2023
  • 1 reply
  • 1924 views

We want to test upgrading FortiClient via FortiClientEMS Deployment from 7.0.8 to 7.0.9 only on a few clients. FortiClient EMS is still on version 7.0.8

When I create a deployment that uses the FortiClient Installer, that is assigned to most of our clients, as Deployment Package, and specify an endpoint group with let's say only 3 clients in it, will the only this three clients be upgraded, or will all clients with the selected installer be upgraded?

 

The documentation seems not to be clear on this (Endpoint group is marked as optional but without explanation what this will do):
https://docs.fortinet.com/document/forticlient/7.0.8/ems-administration-guide/773770/deploying-forticlient-upgrades-from-forticlient-ems

 

I just want to ensure that not all our clients receive the upgrade in case that this will cause any trouble.

 

Kind regards

1 reply

Marthen
New Member
July 31, 2023

Need to create specific OU in AD, put computers there and assign upgrade deployment.

Groups aren't AD security groups but EMS groups

cpx
cpxAuthor
Visitor III
August 1, 2023

Hello Marthen, thank you for the suggestion. We don't use AD with FortiClientEMS because of internal policies.
But if I understand you correctly, using a different EMS group  (a local workgroup in this case) will prevent a rollout on clients not assigned to this group?

Kind regards

Marthen
New Member
August 1, 2023

Hello,

 

I don't use local EMS groups so cannot confirm your scenario, but I expect when you assign Deployment  to Endpoint group then it will  be applied installation only there. Otherwise it make no sense to put group there and deploy on every computer.