Patching vulnerabilities on endpoints

You can request FortiClient patch detected critical and high vulnerabilities on endpoints.

FortiClient can automatically patch many software. However, the endpoint user must manually patch some detected software vulnerabilities. If a vulnerability requires the endpoint user to download and install software to patch a vulnerability, FortiClient displays the information.

To patch vulnerabilities on a domain or group of endpoints:

1. Go to Endpoints.
2. Right-click a domain or workgroup, and select Patch critical/high vulnerabilities. FortiClient initiates automatic vulnerability patching with the next FortiClient Telemetry communication.

To patch vulnerabilities on an endpoint:

1. Go to Endpoints.
2. Select All Endpoints, a domain, or workgroup.
3. Click an endpoint, and from the Patch menu, select one of the following options:
   • Selected Vulnerabilities on Selected Clients
   • Selected Vulnerabilities on All Affected Clients
   • All Critical and High Vulnerabilities

   FortiClient initiates automatic vulnerability patching with the next FortiClient Telemetry communication.