Dashboard

Displays a dashboard of information about all managed endpoints.

Administration

Add and manage FortiClient EMS administrators.

Configure the inactivity timeout and other user settings.

Configure multitenancy sites.

View log messages generated by FortiClient EMS and download raw logs.

System Settings

Change the IP address and port and configure other EMS settings for FortiClient EMS, including enabling Chromebook management.

Specify what level of log messages to capture in FortiClient EMS logs and when to automatically delete logs and alerts.

Configure the FortiGuard server location. Configure FortiManager to use for client software/signature updates and configure FortiCloud settings.

Enable alerts for FortiClient EMS events.

Dashboard

Displays a dashboard of information about all managed endpoints.

Displays the Current Vulnerabilities Summary chart that provides a centralized vulnerability summary for all managed endpoints. You can observe high-risk hosts and critical vulnerabilities existing on endpoints. You can also access links on how to fix or repair the vulnerabilities.

Displays a dashboard of information about all managed Chromebooks. Only available if the EMS for Chromebooks Settings option is enabled in System Settings > EMS Settings.

Endpoints

Manage all endpoints.

Add and manage AD domains.

Manage endpoints from AD domains. You can also add an AD domain if none exist.

Manage endpoints from workgroups.

Configure rules to automatically place endpoints into custom groups based on their installer ID, IP address, or OS.

Only available if the EMS for Chromebooks Settings option is enabled in System Settings > EMS Settings.

Manage users from all Google domains.

Add and manage Google domains.

Manage users from specific Google domains. You can also add a Google domain if none exist.

Deployment & Installers

Create deployment configurations to deploy FortiClient to endpoints.

Add and manage FortiClient deployment packages.

Endpoint Policy & Components

Create endpoint policies and manage policy updates for Windows, macOS, and Linux endpoints.

Upload and import CA certificates into FortiClient EMS.

Configure on-fabric detection rules for endpoints.

Create endpoint policies and manage policy updates for Chromebook endpoints. Only available if the EMS for Chromebooks Settings option is enabled in System Settings > EMS Settings.

Endpoint Profiles

Create profiles and manage profile updates for all profiles.

Import Web Filter profiles from FortiOS or FortiManager.

Define Zero Trust tagging rules.

View tagged endpoints.

View all FortiGates connected to EMS for Zero Trust tagging and the list of tags that are shared with each FortiGate.

Software Inventory

View applications installed on endpoints. Display applications by application or application vendor name.

View applications installed on endpoints, sorted by endpoint.

Quarantine Management

View and allowlist files on endpoints that Sandbox or AV has quarantined.

View and delete allowlisted files from the Allowlist pane.

Administration

Add and manage FortiClient EMS administrators.

Add and manage FortiClient EMS admin roles and permissions.

View Fabric devices connected to EMS.

Configure SAML SSO authentication.

View log messages generated by FortiClient EMS and download raw logs.

System Settings

Change the IP address and port and configure other EMS settings for FortiClient EMS, including enabling Chromebook management.

Specify what level of log messages to capture in FortiClient EMS logs and when to automatically delete logs and alerts.

Configure the FortiGuard server location. Configure FortiManager to use for client software/signature updates and configure FortiCloud settings.

Enable alerts for FortiClient EMS events.

Enable alerts for endpoint events.

Set up an SMTP server to enable email alerts.

Customize the message that displays on an endpoint when it has been quarantined by FortiClient EMS