FortiClientEMS Questions

[egnompaln]

I am looking for some guidance here for our FortiClient EMS server. A quick search didn't return anything for my questions.

Is there a way to force FortiClients to update signatures using the EMS? I don't have a FortiManager device, just a Fortigate 100D besides the EMS, and all I can find points to how to set up the FortiManager to do it.

Second, it doesn't seem to want to install FortiClients on cross domain workstations, even though it found them with the domain credentials supplied. Any tips on this?

Thanks for your help!

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[btan]

Hi egnompaln,

To force virus sig update from EMS, you can done by below:
1. Tick endpoints
2. Action > Update Signatures
EMS wouldn't report back or indicates whether the update is successful or not though.
In fact by default, all FCT will look for updates every hour, therefore there is no need to do this manually at all.


And for your second question, do you mean an initial deployment from EMS? (meaning there is no any FCT installed on those endpoints)
There are a few pre-requisite on AD server and endpoints that need to be done before initial deployment:
https://docs.fortinet.com/document/forticlient/7.0.9/ems-administration-guide/978154/preparing-the-a...
Also, kindly note that initial deployment from EMS is not supported anymore from EMS 7.2.0 onwards.

[chauhans]

Hello @egnompaln 

Yes, there is a way to force FortiClients to update signatures using the EMS. You can do this by following these steps:

1. Go to the Endpoints tab in the EMS web interface.
2. Select the FortiClients that you want to force to update signatures.
3. In the Action menu, select Update Signatures.
4. In the Force Update dialog box, select the Force Update checkbox and click OK.

This will force the selected FortiClients to update their signatures immediately, even if the automatic update setting is not enabled.

Let me know if the above information was helpful.

Thanks,
Shaleni