Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mesen
New Contributor II

Is it possible to uninstall applications with EMS?

Hello, I am working on cleaning up security vulnerabilities on users within the FortiClient  EMS which typically lacks a DC connection and operates in a complex structure. There are over 100 computers with 7-Zip installed, and they want it removed. Is there a way to achieve this through EMS ?

7 REPLIES 7
funkylicious
SuperUser
SuperUser

Hi,

As far as I know, FortiEMS does not offer this option.

"jack of all trades, master of none"
"jack of all trades, master of none"
mesen
New Contributor II

I've never seen this button working before, but I'm wondering... can we make a special version for the patch button part here? like a manual version update

 

Ekran görüntüsü 2025-01-14 114459.png

funkylicious

If I'm not mistaken, the Patch button would help if a Vulnerability Scan profile is configured/attached to the deployment kit of FortiClient and sees that certain versions are available for the software detected as vulnerable to download/remediate.

 

https://docs.fortinet.com/document/forticlient/7.4.1/ems-administration-guide/29595/patching-vulnera...

 

1.png2.png

3.png

 

"jack of all trades, master of none"
"jack of all trades, master of none"
mesen
New Contributor II

Thank you,

 

The EMS server is not functioning as desired because its internet access is restricted.

Do you know if there is a way to set up a server, like a WSUS server, so it can fetch patches from there?

funkylicious

Don't think WSUS would help EMS for updates/patches.

Only other option ( expect FortiGuard which requires internet access ) is FortiManager.

 

Screenshot 2025-01-14 at 15.07.16.png

"jack of all trades, master of none"
"jack of all trades, master of none"
GoraPakora
New Contributor

Yes, it is possible to uninstall applications through FortiClient EMS, but it requires creating a custom script and deploying it via the EMS system. You can create a batch script to uninstall 7-Zip silently and then push it to the targeted devices using the "Deployment" feature in EMS. Ensure you test the script on a single device before rolling it out to all 100 computers to avoid unexpected issues.

For those interested in tech solutions and tools, check out inshot pro apk for advanced video editing features.

btan

I am sorry, but the above looks like a ChatGPT reply.
There is no such feature in EMS to 'uninstall application' on endpoints.

Regards,
Bon
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors