In order for the Fortigate to filter EMS Client traffic, it needs to be in the traffic flow.
VPN is the normal way to accomplish this.
Which aspect of web filter do you prefer on the Fortigate?
The other biggies for me is the "Search Engine" section and to a smaller degree, the "Proxy Options" section. Since I am a K-12 school, being able to safe search search engines, restrict YouTube, and log all keyword searches is huge. We tie into Google, so restricting accounts to specific Google domain is something I am used to being able to do now with my current filter. I was kind of hoping that EMS had those features for macOS/Windows like they currently do for Chromebook or that I could use the FortiClient to proxy back to my Fortigate, thus replacing my current web-filter.