FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article explains the main difference between these two Endpoint actions in the FortiClient EMS Server.
Scope
FortiClient EMS.
Solution
Deregister endpoint will disconnect FortiClient from EMS. FortiClient will lose the whole configuration (Malware, VPN, Sandbox, etc) and it will only have Zero Trust Telemetry to connect on EMS. The endpoint record will not be removed from EMS, it will have to be deleted manually from the EMS. Related document:Disconnecting and connecting endpoints
Exclude from Management removes the assigned profile from the client (totally disconnected) but the user stays connected to EMS until selecting 'Enable Management'.Related document: Excluding endpoints from management
