Endpoint protection activation

[kinmun]

I have installed forticlient on my desktop and would like to enable the anti-virus portion to be managed by my fortigate 300D.

from the firewall, it shows that I have 10 forticlient licenses available.

where do I get the forticlient license ?

[FortiRack_Eric]

You'll have to purchase a FortiClient license for the FG300D (annual fee)

[kinmun]

even for the 10 free license ??

[Christopher_McMullan]

The 10 free licenses are more "endpoint control" slots. You can register up to 10 FortiClients to the FortiGate with no further configuration or licensing. They will just show up as x/10 used. Once you go past the 10 free licenses, you would have to purchase additional subscriptions.

[Christopher_McMullan]

I'm not quite sure I understand.

You don't need to obtain a code to use the 10 free licenses. They are built-in. Just go ahead and register the client to the FortiGate after enabling FCT-Access as an Administrative Access method under the interface facing clients, and optionally also Detect and Identify Devices to gain greater clarity about what/who is connecting.

[kinmun]

I have managed to get my forticlient on my desktop to connected to the FG.

but it says Realtime Protection is disabled.

do I have to do anything else ?

[Christopher_McMullan]

By default, the FortiClient will defer to the FortiGate for UTM functions while it is 'on net'. To activate Real Time Protection while 'off net', you would need to define a Web Filter profile (among other settings) in an Endpoint Control Profile. You can configure these (in 5.2.3) under User & Device > FortiClient Profiles.

[kinmun]

there is download error when I try to enable the protection 

[kinmun]

does this endpoint realtime protection works when I am connected to the domain ?

eg. not using the forticlient vpn connection.

i noticed that my status is offline 

[kinmun]

i noticed that my forticlient is always tied to the default profile.

I have created a new profile, but cant seems to connect to it.

how do i assigned the new profile ?