Dashboard

Displays a dashboard of information about all managed endpoints.

Displays the Current Vulnerabilities Summary chart that provides a centralized vulnerability summary for all managed endpoints. You can observe high-risk hosts and critical vulnerabilities existing on endpoints. You can also access links on how to fix or repair the vulnerabilities.

Displays a dashboard of information about all managed Chromebooks. Only available if the EMS for Chromebooks Settings option is enabled in System Settings > Server.

Endpoints

Manage all endpoints.

Add and manage AD domains.

Manage endpoints from AD domains. You can also add an AD domain if none exist.

Manage endpoints from workgroups.

Configure rules to automatically place endpoints into custom groups based on their installer ID, IP address, or OS.

Only available if the EMS for Chromebooks Settings option is enabled in System Settings > Server.

Manage users from all Google domains.

Add and manage Google domains.

Manage users from specific Google domains. You can also add a Google domain if none exist.

Quarantine Management

View and allowlist files on endpoints that Sandbox or AV has quarantined.

View and delete allowlisted files from the Whitelist pane.

Software Inventory

View applications installed on endpoints. Display applications by application or application vendor name.

View applications installed on endpoints, sorted by endpoint.

Create endpoint policies and manage policy updates for Windows, macOS, and Linux endpoints.

Create endpoint policies and manage policy updates for Chromebook endpoints. Only available if the EMS for Chromebooks Settings option is enabled in System Settings > Server.

Endpoint Profiles

Create profiles and manage profile updates for all profiles.

Create profiles and manage profile updates for local Windows, macOS, and Linux profiles.

Create profiles and manage profile updates for local Chromebook profiles. Only available if the EMS for Chromebooks Settings option is enabled in System Settings > Server.

Manage Installers

Add and manage FortiClient deployment packages.

View FortiClient installers available from FortiGuard. Add custom installers.

Policy Components

Upload and import CA certificates into FortiClient EMS.

Configure on-net detection rules for endpoints.

Create and assign Telemetry gateway lists and manage list updates.

Define compliance verification rules.

View tagged endpoints.

View all FortiGates connected to EMS through the FSSO protocol, and the list of tags that are shared with each FortiGate.

Administration

Add and manage FortiClient EMS administrators.

Add and manage FortiClient EMS admin roles and permissions.

Configure an AD domain as the user server. This is used to authenticate FortiClient EMS administrators.

Configure the inactivity timeout and other user settings.

Back up the FortiClient EMS database.

Restore the FortiClient EMS database.

Upgrade or renew the FortiClient EMS license.

View log messages generated by FortiClient EMS and download raw logs.

System Settings

Change the IP address and port and configure other server settings for FortiClient EMS, including enabling Chromebook management.

Specify what level of log messages to capture in FortiClient EMS logs and when to automatically delete logs and alerts.

Configure the FortiGuard server location. Configure FortiManager to use for client software/signature updates and configure FortiCloud settings.

Configure endpoint settings.

Enable the pre-login banner to display a message to a user logging into FortiClient EMS.

Enable alerts for FortiClient EMS events.

Enable alerts for endpoint events.

Set up an SMTP server to enable email alerts.