FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to control the sync threshold when FortiGate loses connection to Forticlient EMS.
Scope
FortiGate, Forticlient EMS.
Solution
Usually when the FortiGate is disconnected from Forticlient EMS, the endpoints tags will be marked as out of sync and traffic will be blocked on FortiGate.
The below CLI command will control when FortiGate will consider the endpoint records and host tags as out of sync when FortiGate loses the connection to Forticlient EMS.
Below is the out-of-sync threshold that can be configured from the CLI.
config endpoint fctems edit <name> set out-of-sync-threshold < 10 - 3600 secs> next end
