Forticlient EMS - No Traffic Log from "Monitored" Endpoints

[ExIt]

Hi! I've a question about Forticlient EMS Consolle..

I've installed Forticlient EMS 6.0 and deployed forticlient 6.0.

I made a policy to monitor and not to block all the Internet traffic and successfully deployed to my endpoints, but using the EMS consolle I'm unable to see what they do, no log, no information registered.

But if I try to export the log directly from a forticlient the log file contains all the network traffic information.

How can i receive this information on my EMS consolle? Why these information are not sent?

thanks in advance

Have a nice day

ExIt

[Markus]

Hello and welcome to the Forums As I know, EMS is just for configuring Forticlient and can "only" see vulnerability status, infected endpoints, webfilter violations, application firewall violations and sandbox status . If you need detailed traffic logs from the clients, you need probaly Fortianalyzer. Faz is able to collect logs from Forticlient. Best,

Markus