Fortinet black logo
6.0.3

Creating a FortiClient installer

Creating a FortiClient installer

Now you must create a FortiClient installer. You will use this installer to deploy FortiClient to endpoints.

When you create a FortiClient installer to FortiClient EMS, you can specify what FortiClient features to include in the installer for the endpoint. You can include a feature in the installer, then disable the feature in the profile. Because the feature is included in the installer, you can update the profile later to enable the feature on the endpoint.

For example, consider that you create an installer that has SSL VPN and IPsec VPN enabled. You then assign the installer to a profile where VPN is disabled. The endpoints that the profile is deployed to will have VPN disabled. At a later time, if you enable VPN on the profile, the endpoints will then have VPN enabled, since it was included in the installer.

When you create a FortiClient installer in FortiClient EMS, an installer for the Windows operating system and an installer for the macOS operating system are added to FortiClient EMS.

After you add a FortiClient installer to FortiClient EMS, you cannot edit it. You can delete the installer from FortiClient EMS, and edit the installer outside of FortiClient EMS. You can then add the edited installer to FortiClient EMS.

  1. Go to Profile Components > Manage Installers.
  2. Click Add.
  3. On the General tab, set the following options.

    Name

    Enter the FortiClient installer's name. In the example, the installer's name is FCT_603, to indicate that is used to deploy FortiClient 6.0.3.

    Notes

    Enter any notes about the FortiClient installer. This field is optional.

    Version

    Select the FortiClient version to install. The example is configured for FortiClient 6.0.

    Patch version

    Select the specific FortiClient patch version to install. The example is configured for FortiClient 6.0.3.

    Keep updated to the latest patch

    Select to enable FortiClient to automatically update to the latest patch release when FortiClient is installed on an endpoint. This is optional and has not been enabled in this example.

  4. Click Next. On the Features tab, you can select which features to include in the installer. In this example, only VPN has been included in addition to Security Fabric Agent, which is enabled by default.

  5. Click Next. On the Advanced tab, you can set additional options for the installer. In this example, only automatic registration is enabled for the installer. This allows FortiClient to automatically connect Telemetry to EMS or FortiGate after FortiClient is installed on the endpoint.

  6. Click Next. The Telemetry tab displays the hostname and IP address of the EMS server, which will manage FortiClient once it is installed on the endpoint. In the Gateway list dropdown list, select the gateway list created in Creating a gateway list. In this example, this is QA_FGT_600.

  7. Click Save. The FortiClient installer is added to FortiClient EMS and displays on the Manage Installers pane.

Creating a FortiClient installer

Now you must create a FortiClient installer. You will use this installer to deploy FortiClient to endpoints.

When you create a FortiClient installer to FortiClient EMS, you can specify what FortiClient features to include in the installer for the endpoint. You can include a feature in the installer, then disable the feature in the profile. Because the feature is included in the installer, you can update the profile later to enable the feature on the endpoint.

For example, consider that you create an installer that has SSL VPN and IPsec VPN enabled. You then assign the installer to a profile where VPN is disabled. The endpoints that the profile is deployed to will have VPN disabled. At a later time, if you enable VPN on the profile, the endpoints will then have VPN enabled, since it was included in the installer.

When you create a FortiClient installer in FortiClient EMS, an installer for the Windows operating system and an installer for the macOS operating system are added to FortiClient EMS.

After you add a FortiClient installer to FortiClient EMS, you cannot edit it. You can delete the installer from FortiClient EMS, and edit the installer outside of FortiClient EMS. You can then add the edited installer to FortiClient EMS.

  1. Go to Profile Components > Manage Installers.
  2. Click Add.
  3. On the General tab, set the following options.

    Name

    Enter the FortiClient installer's name. In the example, the installer's name is FCT_603, to indicate that is used to deploy FortiClient 6.0.3.

    Notes

    Enter any notes about the FortiClient installer. This field is optional.

    Version

    Select the FortiClient version to install. The example is configured for FortiClient 6.0.

    Patch version

    Select the specific FortiClient patch version to install. The example is configured for FortiClient 6.0.3.

    Keep updated to the latest patch

    Select to enable FortiClient to automatically update to the latest patch release when FortiClient is installed on an endpoint. This is optional and has not been enabled in this example.

  4. Click Next. On the Features tab, you can select which features to include in the installer. In this example, only VPN has been included in addition to Security Fabric Agent, which is enabled by default.

  5. Click Next. On the Advanced tab, you can set additional options for the installer. In this example, only automatic registration is enabled for the installer. This allows FortiClient to automatically connect Telemetry to EMS or FortiGate after FortiClient is installed on the endpoint.

  6. Click Next. The Telemetry tab displays the hostname and IP address of the EMS server, which will manage FortiClient once it is installed on the endpoint. In the Gateway list dropdown list, select the gateway list created in Creating a gateway list. In this example, this is QA_FGT_600.

  7. Click Save. The FortiClient installer is added to FortiClient EMS and displays on the Manage Installers pane.