How integrate AD with forticlient CLOUD EMS

[Oskar]

How integrate AD with FortiClient CLOUD EMS

[btan]

Hi Oksar,

The procedure should be the same as on-prem EMS:
https://docs.fortinet.com/document/forticlient/7.0.6/ems-administration-guide/123277/adding-endpoint...

[Oskar]

emmm... So what? I need open port from the internet to my AD servers?

So how can i do this safely? bcs open port to AD servers is not very secure options.

[btan]

You have to indeed open port to at least your EMS Cloud server public IP.
You can locate your EMS public IP in the about tab at the bottom left when you login to EMS Cloud.

[Oskar]

Still not very safe if someone spoof ip adress.

[minusnine]

Did you ever get this implemented? I don't understand which IP to use on the EMS Cloud config to see the internal AD Server? I've found my public address for EMS Cloud to allowlist to the internal AD server - but how would EMS Cloud know how to route to the internal address of the AD Server?