Hi, We're planing on puting Forti EMS in DMZ, so clients can pick up
telemetry from public.Does Forti EMS server needs to be domain joined
machine or we can just connect it via LDAP(S) with AD?Forti EMS will
also comunicate with Fortigates for ZTNA t...
ThanksI tried to leverage between practicaly (domain joined) and
theoreticaly (isolated standalone box in DMZ...) best options.We will
start with AD joined and when we well establish whole sytem, we will
migrate to standalone, that's the plan at leas...
Hi, I did, tags worked awesome before, ZTNA added complexity, and you
cant activate it via GUI (bug)You must enable it via CLI config firewall
policy edit set ztna-status enable set ztna-ems-tag
