Secure endpoint connection to EMS

[CVB11]

We use the EMS server to configure the FortiClients on our laptops.
How can I ensure in the EMS server, that only our laptops connect to the EMS and that no foreign devices ?

Regards

Chris

[ozkanaltas]

Hello @CVB11 ,

You can use intitation only, AD authentication, or SAML authentication method to register users to EMS.That way, if users don't verify their identity can't register ems. 

You can review these documents for these settings.

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/319002/configuring-ems...

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/002758/invitations

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/334169/configuring-use...

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/417920/configuring-use...

[sprashant]

Hello @CVB11 

You can also just use ZTNA, as these tags would be pushed on the end user and only the users having these tags will be allowed.

For reference: https://docs.fortinet.com/document/fortigate/7.2.5/ssl-vpn-to-ztna-migration-guide/299214/prepare-fo...

https://docs.fortinet.com/document/fortigate/7.0.0/ztna-concept-guide/960805/forticlient-ems