BPS
FortiClient Best Practices Service (BPS) is an account-based annual subscription providing access to a specialized team that delivers remote guidance on deployment, upgrades, and operations. The service allows you to share information about your deployment, user requirements, resources, and other related items. Based on the information provided, the BPS experts can provide recommended best practices, sample code, links to tools, and other materials or assistance to speed up adoption and guide you towards best practice deployments. The team does not log into customer devices to make changes for them. This is a consulting and guidance service which may include sample configurations or playbooks. This is not an on-site professional services offer.
Note that for integration with other Fortinet products, configuration guidance is only provided for EMS and FortiClient.
Below are some examples of what the Best Practice Service can help with:
- Initial EMS setup:
- Sizing
- FortiClient Connectivity
- AD integration
- Server preparation
- EMS migration: migrating to a new EMS server or migrating endpoints to a new EMS
- EMS configuration:
- Email alerts
- Licensing
- Management capacity planning
- EMS upgrade planning:
- Sequence
- Testing
- RBAC and LDAP/AD integration:
- Grouping endpoints
- Assigning profiles
- Fortinet Security Fabric integration:
- EMS connector
- Endpoint tags
- FortiAnalyzer logging
- Endpoint policy:
- Endpoint profile:
- How to configure security features to accomplish security needs
- Effects and cautions when enabling specific features
- Client deployment:
- What OSes are supported (Windows, Mac, Servers (Windows + Linux))
- Deploying from EMS or using 3rd party software
- Remote access:
- VPN configuration
- Auto-connect
- Always up
- VPN before logon
- EMS redundancy:
- HA
- Disaster recovery
- Effects on the FortiClient in the event of outages
- FortiSASE onboarding
- ZTNA onboarding
For more details on the Best Practice Service, see the following resources: