Register the Forticlient endpoint to ForticlientEMS via the Internet.

[Alex1]

Hi Team,

My Forticlient EMS is behind a Fortigate NAT , port 8013. Can I connect to EMS from my client on a public IP with a port? For example: 3.3.3.3:8013 Or do I have to use fqdn?

FortiClient,FortiGate, FortiClient, FortiAuthenticator, FortiDB

[gfleming]

You can use FQDN or IP address. Both work.

[Alex1]

Hi, 

Weird. I'm trying to connect to EMS using a public IP. But the client asks for the invite code. But since EMS is behind Fortigate's NAT, the invite code uses a private ip. In this situation, Forticlient definitely cannot connect to EMS over the Internet.

I see an incoming connection, but for some reason the server resets it

Reinstalled the client to an earlier version, and now I get this error

I disabled the Use SSL certificate for Endpoint Control. But for some reason I get this error

[gfleming · Accepted solution]

Disable 'Enforce User Verification' that should get rid of the invitation code requirement: https://docs.fortinet.com/document/forticlient/7.0.7/ems-administration-guide/319002/configuring-ems...

Then see how it behaves.

[Alex1]

Great. That helped!