EMS and FortiClient setups

For FortiClient in managed mode, you can use an EMS profile to disable installed components in FortiClient but you cannot use an EMS profile to enable uninstalled components in FortiClient. See EMS and endpoint profiles.

For example, if you install FortiClient with APT components selected, Sandbox Detection is enabled on the Malware Protection tab in FortiClient, and you can use an EMS profile to disable Sandbox Detection. However, if you install FortiClient with APT components cleared, Sandbox Detection is disabled on the Malware Protection tab in FortiClient and you cannot use an EMS profile to enable Sandbox Detection.