Managed mode with FortiGate
When FortiClient Telemetry is connected to FortiGate and the FortiGate administrator has disabled compliance, network access compliance (NAC) is not enforced. The Compliance & Telemetry tab displays Not Participating and you are not required to maintain a compliant status to access the network.
When FortiClient Telemetry is connected to FortiGate and the FortiGate administrator has enabled compliance, NAC is enforced and you may be required to maintain a compliant status to access the network, depending on how FortiGate enforces NAC.
If FortiGate is configured to block network access for endpoints with non-compliant status, certain requirements must be met to maintain a compliant status and network access. See FortiGate and FortiClient profiles.
When FortiGate is integrated with EMS, the endpoint may also receive a profile from EMS that contains FortiClient configuration information. |
If FortiGate is configured to warn endpoints about non-compliant status, you can acknowledge the status and access the network without fixing the issues causing a non-compliant status.
The following dialog box shows an example of an endpoint connected to a FortiGate with the compliance feature disabled.
The following dialog box shows an example of an endpoint connected to a FortiGate with the compliance feature enabled, and the endpoint is in compliance with the FortiGate compliance rules.
The Compliance & Telemetry tab displays the following information:
Compliance |
|
Indicates the endpoint compliance feature is enabled on FortiGate and the endpoint is in compliance with FortiGate compliance rules. See Fixing non compliance (blocked) and Fixing non compliance (warning). |
|
Indicates the compliance enforcement feature is not enabled on FortiGate. |
|
FortiGate information |
|
Displays the IP address, hostname, and serial number of the FortiGate to which FortiClient Telemetry is connected. You can disconnect by clicking Disconnect. |
Compliance Policy |
|
Click the View Compliance Rules to display the compliance rules for FortiGate. |