Technical Tip: Importing Web Filter Profiles from FortiGate to FortiClient EMS

[adriellousada]

Description	This article outlines how to import the default and custom categories from FortiGate to FortiClient EMS.
Scope	FortiClient EMS and FortiGate.
Solution	FortiGate requirements: Important: HTTPS access must be permitted by FortiGate to effectively import Web Filter profiles from FortiOS to FortiClient EMS. In FortiGate: Go to Network -> Interfaces. Select the desired port. Under Administrative Access, check the HTTPS option. If the admin account that will be used for the import is configured with a trusted host, add the IP from where the connection attempt will originate. If using EMS Cloud, add the Cloud IP: FortiClient Cloud Portal > -About. Related document: Allowlisting the FortiClient Cloud IP addresses    Importing Web Filter Profile: Steps to Import a Web Filter Profile from FortiGate to EMS: On FortiGate, navigate to Security Profiles -> Web Filter. On EMS, go to Endpoint Profiles -> Web Filter -> Import -> From FortiGate/FortiManager. In the screen that appears, fill out the following fields: The FortiGate's configured Web Filter profiles will be listed. Select the profiles that will be imported into FortiClient EMS and select Next.  Select the Synchronization Mode and select Import: The chosen profiles will be imported by EMS and shown in a group called FortiGate named after the source under Endpoint Profiles -> Manage Profiles. Checking custom category import. Additionally, custom categories are imported. The URLs added to each custom category, however, will be displayed in the exclusion list with the same configured action rather than in the category list. This is demonstrated in the following example: Category created in FortiGate: Example of the same category after being imported into EMS: Note that the same URL was imported with the deny action, as originally configured in the FortiGate.