EMS Administration Guide

Introduction
- FortiClient EMS components
- Documentation
Getting started
- Getting started with managing Windows, macOS, and Linux endpoints
- Getting started with managing Chromebooks
Installation preparation
- System requirements
- License types
  - FortiClient EMS
  - Component applications
- Required services and ports
- Management capacity
- FortiClient Telemetry security features
- Server readiness checklist for installation
- Upgrading from an earlier FortiClient EMS version
- Install preparation for managing Chromebooks
Installation and licensing
- Downloading the installation file
- Installing FortiClient EMS
- Installing FortiClient EMS using the CLI
- Starting FortiClient EMS and logging in
- Accessing FortiClient EMS remotely
- Licensing FortiClient EMS
  - License status
  - Help with licensing
- Specifying different ports
- Upgrading Microsoft SQL Server Express to Microsoft SQL Server Standard or Enterprise
- Uninstalling FortiClient EMS
Chromebook-only setup
- Google Admin Console setup
- Service account credentials
  - Configuring default service account credentials
  - Configuring unique service account credentials
GUI
- Banner
- Left pane
- Content pane
Dashboard
- Viewing the FortiClient Status
- Viewing the Vulnerability Scan dashboard
- Viewing Chromebook Status
Endpoint management
- Windows, macOS, and Linux endpoints
- Google Domains
- Group assignment rules
Quarantine Management
- Files
- Whitelist
Software Inventory
- Applications
- Hosts
Endpoint Policy
- Adding an endpoint policy
- Editing an endpoint policy
- Deleting an endpoint policy
- Enabling/disabling an endpoint policy
- Managing endpoint policy priority levels
Chromebook Policy
Endpoint Profiles
- Configuring profiles
- Viewing profiles
- Managing profiles
- Profile references
Managing installers
- Deployment Packages
- FortiClient installers
  - Adding a custom FortiClient installer
  - Viewing installers
Policy Components
- CA Certificates
- On-net Detection Rules
Telemetry Gateway Lists
- Creating a Telemetry gateway list
- Exporting a Telemetry gateway list to XML
- Viewing Telemetry gateway lists
- Viewing assigned Telemetry gateway lists
Compliance Verification
- Compliance Verification Rules
- Host Tag Monitor
- Configuring FortiOS dynamic policies using EMS dynamic endpoint groups
- Fabric Device Monitor
Deployment
- Preparing the AD server for deployment
- Preparing Windows endpoints for FortiClient deployment
- Deploying FortiClient on endpoints
- Deploying initial installations of FortiClient (macOS)
- Deploying FortiClient upgrades from FortiClient EMS
Administration
- Administrators
- Admin roles
- User Servers
- Configuring User Settings
- Fabric Devices
- Database management
  - Backing up the database
  - Restoring the database
- Licenses
  - Logging into FortiCare
  - Uploading a license file for activation, upgrade, or renewal
- Logs
System Settings
- Configuring Server settings
- Adding an SSL certificate to FortiClient EMS for Chromebook endpoints
- Configuring Logs settings
- Configuring Fortinet Services settings
- Configuring Endpoints settings
- Configuring the login banner
- SAML SSO
- Alerts
- Custom Messages
  - Customizing the endpoint quarantine message
  - Customizing Web Filter messages
Creating a support package

Home FortiClient 6.2.2 EMS Administration Guide

6.2.2

Configuring profiles

You can create and configure separate profiles for Windows, macOS, and Linux endpoints and for Chromebook endpoints. You can also edit the default profiles.

When you install FortiClient EMS, a default profile is created. EMS applies this profile to any groups you create. The default profile is designed to provide effective levels of protection. There are separate default profiles for Windows, macOS, and Linux endpoints and for Chromebook endpoints.