Importing Web Filter profiles from FortiManager

You can import Web Filter profiles from FortiManager into FortiClient EMS, then edit the profile in FortiClient EMS to add a FortiClient deployment package or add configuration information.

To import Web Filter profiles from FortiManager:

1. Configure FortiManager to allow EMS profile importation:
   1. Go to System Settings > Network and enable the HTTPS checkbox.
   2. You must set Remote Procedure Call to read. Run the get system admin user admin command. Ensure that rpc-permit is set to read-write.
   3. If rpc-permit is not set to read, run the following commands:

      config system admin user

      edit "admin"

      set rpc-permit read

      end

2. Click Endpoint Profiles > Manage Profiles > Import > From FortiGate / FortiManager. The Import Profiles from FortiGate/FortiManager window opens.

   

3. Under Type, select FortiManager.
4. Complete the following options, and click Next.

   IP address/Hostname	Enter the IP address and port of the FortiManager from which the profile is being imported, in the format: <ip address>:<port>.
   VDOM	Enter a VDOM name from the FortiManager if applicable.
   Username	Enter a username for the FortiManager.
   Password	Enter the password for the user account entered above.

   The list of Web Filter profiles configured on the FortiManager displays.

   You can click the </> icon beside each profile to preview the settings in XML format.

5. Select the profiles to import into FortiClient EMS and click Next.

   Select the name of the profile to import all profiles for it into FortiClient EMS. You can also clear the checkbox beside the profiles you do not want to import into FortiClient EMS.

6. Under Synchronization Mode, select one of the following options.
   1. One Time Pull: FortiClient EMS does not automatically sync profile changes from the FortiManager. You can manually sync profile changes after importing the profile. See Syncing profile changes.
   2. Group Schedule: Configure a group synchronization schedule for all selected profiles. Select the next date and time to automatically update the profiles, and the profile update interval in days, hours, or seconds.
   3. Individual Schedule: Configure an individual synchronization schedule for each selected profile. Select the next date and time to automatically update each profile, and the profile update interval in days, hours, or seconds.
7. Click Import. EMS imports the selected profiles into FortiClient EMS and display under the Endpoint Profiles pane in a group named after the FortiManager from which they were imported.
8. In the Endpoint Profiles page, select an imported profile to edit it.

   You can edit additional options to provide configuration information. You can also add a FortiClient deployment package to the profile by using the Deployment tab. You can create custom deployment packages. See Adding a FortiClient deployment package.

9. Edit the options on the tabs. Click Save Profile.