Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
CVB11
New Contributor

Secure endpoint connection to EMS

We use the EMS server to configure the FortiClients on our laptops.
How can I ensure in the EMS server, that only our laptops connect to the EMS and that no foreign devices ?

 

Regards

Chris

2 REPLIES 2
ozkanaltas
Valued Contributor III

Hello @CVB11 ,

 

You can use intitation only, AD authentication, or SAML authentication method to register users to EMS.That way, if users don't verify their identity can't register ems. 

 

You can review these documents for these settings.

 

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/319002/configuring-ems...

 

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/002758/invitations

 

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/334169/configuring-use...

 

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/417920/configuring-use...

 

 

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
sprashant
Staff
Staff

Hello @CVB11 

 

You can also just use ZTNA, as these tags would be pushed on the end user and only the users having these tags will be allowed.

 

For reference: https://docs.fortinet.com/document/fortigate/7.2.5/ssl-vpn-to-ztna-migration-guide/299214/prepare-fo...

https://docs.fortinet.com/document/fortigate/7.0.0/ztna-concept-guide/960805/forticlient-ems

Sprashant
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors