Technical Tip: FortiClient EMS cannot match Deploy...

FortiClient

FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.

Article Id 294318

Description

This article describes that FortiClient EMS cannot match the Deployment Policy when the endpoint belongs to 2 AD groups.

Scope

FortiClient.

Solution

Starting from EMS v7.2.1, vEMS can integrate with Azure AD (aka Microsoft Intra ID) and import endpoint devices from it.

However, up to the latest EMS v7.2.4, EMS will not match an endpoint with 2 Azure AD groups to any Deployment Policy.

when-2-AD-groups

policy-wont-match

This is fixed in FortiClient EMS v7.2.5 and above.

405

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: FortiClient EMS cannot match Deployment policy when endpoint belongs to 2 Azure AD groups