Forticlient EMS and VPN access with policy authentication to EMS

[James_G]

I want to trial remote VPN access. My requirements will be we only allow connection if forticlient EMS conditions are met. I know that fortios 6.2 brought EMS server connection into the fabric (running 6.2.2 now, 6.2.3 soon). My question to the group is if anyone has done this successfully, was the policy with EMS reference seamless and instant? I expect the EMS reference will be at firewall policy, not actual VPN connection, but hope people get the idea of my thinking.

[jshields]

I'm pretty new to the new fortinet products and have been trying to figure out the same thing, but haven't quite figured it out yet.  Best I could find were basic AV/FW compliance checks on the VPN settings (but that only applies to Win/Mac), and I'm also looking for a more concrete way to ensure that only EMS-managed devices can connect