Skip to main content
tschacherl
Explorer
February 12, 2025
Question

Prevent Connection to WiFi if Forticlient is not installed on endpoint

  • February 12, 2025
  • 3 replies
  • 942 views

I have a fortigate 60E with Fortios 7.4.7. I have FortiClientEMS 7.2.8. What I'm trying to find out is if I can block endpoints that don't have FortiClient installed from connecting via the WiFi. Are there any cookbook recommendations for this? 

3 replies

AEK
SuperUser
SuperUser
February 12, 2025

If you mean your company's WiFi, then you can use ZTNA tags in the firewall rules that are allowing traffic from the SSID(s) to the other networks.

Once you do that, only clients that have the tags can communicate through the desired SSID(s).

AEK
tschacherl
Explorer
February 12, 2025

Are you able to point me to any docs that might provide a step-by-step on how to implement this? 

AEK
SuperUser
SuperUser
February 13, 2025

Here is a tutorial.

https://docs.fortinet.com/document/fortigate/7.2.11/administration-guide/477578

 

Also here is a full ZTNA documentation, in case you want to read more about ZTNA, to understand it more and to be more able to configure it.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ZTNA-Zero-Trust-Network-Access-Resource-List/ta-p/286196

Hope it helps.

AEK
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT