Endpoint management server (ems) is actively blocking this forticlient from registering
This has happened twice now. We have remote clients who receive
"endpoint management server (ems) is actively blocking this forticlient from registering"
from the Forticlient (6.2.6) when they try to register to our EMS server. Other clients with the same release, also remote, have no issues.
The one last week, I believe that the fix was to reinstall the Forticlient because in that case, they had an older version. But the person today has the same version as everyone else. Reinstalling (and even RemoveFTCID) did nothing but extend the trial period of the VPN.
What is really annoying is I can find NOTHING on the EMS server to help figure out what is going on. The logs are happy to tell me about how well it's syncing up our AD users via LDAP. But there is nothing at I can find for this client in question.
users are reportedly facing issues citing unable to send their text messages as message blocking is active. Here we provide you info about troubleshooting message blocking is active issue on both iOS and Android devices. Here is the solution for the errors like ‘unable to send message message blocking is active and others.
Never found anything to resolve this. But we did work-around. Working with support, one step was to delete the machines from EMS and re-add them, however the machines were not showing there. The machines are stand alone machines - not on the domain. One of the more problematic ones was joined to the domain and has not had issues since.
It appears that EMS does not play well (or understand) a mix of domain based computers and workgroup based ones.
FYI - these workgroup ones were at home for remote access and at the time we felt that was the easier path for end users - a local account that auto-logged in, and didn't expect for this C-19 issue to go on for this long!
Just putting this out there in case anyone else ends up in the same situation...a semi-answer.
we can check the logs whats happening for that we have to simulate same issue again .
1. remove issue reported client from EMS
2. Set log level on the EMS to debug
3. collect Fcmdaemon log to verify registration data logged by the EMS
for changing EMS log level to debug - (version 6.2 EMS ) System settings-->logs--->log level .
to get fcmdaemon log goto EMS server -->installed folder (program x86)--->Fortinet--->ForticlientEMS--->run FcmDaemon.exe --->to get log same folder fcmdaemon[date,time].log (download logs to computer )
please collect both logs and verify , log collection should run while simulating issue again then only we will get proper logs
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.