Making Forticlient Available when off domain

[FortinKnight]

Is it possible and if so what would be required to have forticilent ems visible to endpoints that are off the domain, so they receive any policy / profile updates or new configurations.

So when connected the endpoint checks its ip address and if set as a external ip it redirects to the EMS server on the domain to check.

I know there is a offline profile that cant be added to the policy but this stays as is and wont include any updates or changes that need synchronising to off domain endpoints.

thanks 

[Bowale]

When you mean off the domain, do you mean that a user with forticlient endpoint is not part of your active directory list or a user that is part of your AD is currently not within your network where EMS can be reachable? Kindly make it clear

[FortinKnight]

A user that is part of the current AD and not connected within the network.