FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
volkanavsar
Staff
Staff
Article Id 333467
Description This article describes how each of the available deployment options within EMS behaves on the client side.
Scope FortiClient EMS On-premises and Cloud, FortiClient Windows.
Solution

FortiClient software updates can be deployed from FortiClient EMS. The following are the available options and outcomes when enabling this feature.

 

Start at a scheduled time:

 

When this option is enabled with Enable the Deployment, users will see the pop-up message 'FortiClient x.x.x is available. Click to install.'

 

3.png

 

1.png

 

2.png

 

If the user does not click this pop-up message, the installation will start background at the scheduled time. Once installation is completed, a pop-up 'Please reboot this computer' message will be displayed:

 

23.png

 

Unattended installation:

 

4.png

 

When enabled, the end user cannot modify the installation schedule. If needed, the device reboots without warning logged-in users.

 

6.png

 

5.png

 

20.png

 

Reboot when needed:


9.png

 

Reboot the endpoint to install FortiClient when needed. If disabled, users will not be notified when a reboot is needed. The computer will require a manual restart.


8.png

 

25.png

 

Reboot when needed & 

 

14.png

 

Allow the endpoint to reboot without a prompt if no endpoint user is logged into FortiClient.


10.png

 

11.png

 

12.png

 

13.png

 


 

15.png


Notify the end user if a reboot of the endpoint is needed and allow the user to decide what time to reboot the endpoint. Disable rebooting the endpoint without notifying the user.


16.png

 


17.png

 

When the 'Remind me in 10 minutes and reboot automatically in 15 minutes' option is selected, the following popup will appear after 10 minutes:

 

18.png

 

 

26.png

 

If the 'Enable the Deployment' option is selected without any additional configurations, the FortiClient installer will prompt the user to select 'Install' to initiate the installation process.

 

27.png

 

28.png

 

29.png

 

After the installation process is finished, the computer restart also requires confirmation from the user.

 

30.png

 

Priority:


An endpoint may be eligible for multiple deployment configurations. If an endpoint is eligible for multiple enabled configurations, EMS applies the configuration with the first priority level to the endpoint. The default priority for a new deployment configuration is the lowest. It is not possible to edit the priority while creating the deployment configuration. It is possible to edit or change the priority level after creating the deployment configuration. 

 

21.png

 

22.png


Managing deployment configuration priority levels - FortiClient EMS administration guide.


Related document:
Creating a deployment configuration - FortiClient EMS administration guide.