On-net/off-net status with FortiGate and EMS

Endpoints must connect FortiClient Telemetry to FortiGate and/or EMS for FortiClient to use an on-net, off-net, or offline status.

The following rules identify when FortiGate, EMS, or FortiClient determine the status:

When FortiClient 6.0.9 connects Telemetry to FortiOS 6.0.0 or later and/or EMS 6.0.0 or later, FortiClient determines whether the endpoint has an on-net or off-net status.

The following applies when FortiClient 6.0.9 is used with versions of FortiOS and/or EMS earlier than 6.0.0:

• When FortiClient connects Telemetry to FortiOS or EMS, FortiGate or EMS determines whether the endpoint has an on-net or off-net status.
• When FortiClient cannot connect FortiClient Telemetry to FortiOS or EMS, FortiClient determines the on-net or off-net status, based on the on-net subnets.

If FortiClient receives an on-net/off-net status from FortiOS or EMS, it assumes it is connected to a version of FortiOS or EMS prior to 6.0.0 and follows the received status information.

For more details on determining on-net/off-net status, see Determining on-net/off-net status in the FortiClient EMS Administration Guide.