Fortinet white logo
Fortinet white logo

EMS Administration Guide

Filtering the list of endpoints

Filtering the list of endpoints

You can filter the list of endpoints displayed on the Endpoints content pane.

To filter the list of endpoints:
  1. Go to Endpoints.
  2. Click All Domains, a domain, or workgroup. The list of endpoints displays.
  3. Click the Filters menu, and set filters. The filter options display. For text values, you can use a comma (,) to separate values and an exclamation mark (!) to exclude a value. For buttons, hover the mouse over each button to view its tooltip.

    Device

    Lists the filter options for devices.

    Name

    Enter the name(s) to include in the filter.

    User

    Enter the name of the user(s) to include in the filter.

    Group

    Enter the name of the group(s) to include in the filter.

    IP

    Enter the IP address to include in the filter.

    OS

    Enter the name of the operating system(s) to include in the filter.

    Tag

    Enter the tag(s) to include in the filter. This includes security posture tagging and classification tags. See Security Posture Tags and Viewing the Endpoints pane.

    FortiClient

    Lists the filter options for FortiClient version numbers.

    Version

    Enter the FortiClient version number to include in the filter.

    Deployment Package

    Lists the filter options for deployment.

    Name

    Enter the name(s) of the deployment package to include in the filter.

    Status

    Click one or more deployment status buttons to include in the filter. Selected status buttons are green. Hover the mouse over each button to view its tooltip. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    More States

    Click to display additional statuses to include in the filter.

    Policy

    Name

    Enter the name(s) of the policy to include in the filter.

    Status

    Click the policy status to include in the filter. Selected status buttons are green. Choose between Synced and Out-Of-Sync. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    Profile

    Name

    Enter the name(s) of the profile to include in the filter.

    Forensics

    Enabled

    Click whether to filter the list by endpoints where the Forensics feature is enabled or disabled.

    Status

    Click one or more forensic analysis statuses to include in the filter. Selected status buttons are green. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    Verdict

    Click one or more forensic analysis verdicts to include in the filter. Selected status buttons are green. Clear the verdict button to exclude the status from the filter. Excluded verdict buttons are gray.

    EMS

    Status

    Click the status for FortiClient Telemetry connection to EMS to include in the filter. Selected status buttons are green. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    Events

    Select the events to include in the filter. The selected checkboxes beside the events are included in the filter. Clear the checkbox beside the event to exclude the event from the filter.

    Features

    Enter the AV, Firewall, and/or vulnerability signature and/or engine to filter for.

    Bookmarks

    Displays the list of saved filter settings. Displays only after you have saved a bookmark. Click the Bookmark button to name and save filter settings. Click a bookmark to use the saved settings. Click the x beside a bookmark to delete it.

    Search

    Click the Search button to apply the filter setting.

    Reset

    Click the Reset button to clear the filter settings.

    Bookmark

    Click the Bookmark button to save the filter settings as a bookmark.

  4. Click Search. The filtered list of endpoints displays.
  5. Click Reset to clear the filter settings.

Filtering the list of endpoints

Filtering the list of endpoints

You can filter the list of endpoints displayed on the Endpoints content pane.

To filter the list of endpoints:
  1. Go to Endpoints.
  2. Click All Domains, a domain, or workgroup. The list of endpoints displays.
  3. Click the Filters menu, and set filters. The filter options display. For text values, you can use a comma (,) to separate values and an exclamation mark (!) to exclude a value. For buttons, hover the mouse over each button to view its tooltip.

    Device

    Lists the filter options for devices.

    Name

    Enter the name(s) to include in the filter.

    User

    Enter the name of the user(s) to include in the filter.

    Group

    Enter the name of the group(s) to include in the filter.

    IP

    Enter the IP address to include in the filter.

    OS

    Enter the name of the operating system(s) to include in the filter.

    Tag

    Enter the tag(s) to include in the filter. This includes security posture tagging and classification tags. See Security Posture Tags and Viewing the Endpoints pane.

    FortiClient

    Lists the filter options for FortiClient version numbers.

    Version

    Enter the FortiClient version number to include in the filter.

    Deployment Package

    Lists the filter options for deployment.

    Name

    Enter the name(s) of the deployment package to include in the filter.

    Status

    Click one or more deployment status buttons to include in the filter. Selected status buttons are green. Hover the mouse over each button to view its tooltip. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    More States

    Click to display additional statuses to include in the filter.

    Policy

    Name

    Enter the name(s) of the policy to include in the filter.

    Status

    Click the policy status to include in the filter. Selected status buttons are green. Choose between Synced and Out-Of-Sync. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    Profile

    Name

    Enter the name(s) of the profile to include in the filter.

    Forensics

    Enabled

    Click whether to filter the list by endpoints where the Forensics feature is enabled or disabled.

    Status

    Click one or more forensic analysis statuses to include in the filter. Selected status buttons are green. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    Verdict

    Click one or more forensic analysis verdicts to include in the filter. Selected status buttons are green. Clear the verdict button to exclude the status from the filter. Excluded verdict buttons are gray.

    EMS

    Status

    Click the status for FortiClient Telemetry connection to EMS to include in the filter. Selected status buttons are green. Clear the status button to exclude the status from the filter. Excluded status buttons are gray.

    Events

    Select the events to include in the filter. The selected checkboxes beside the events are included in the filter. Clear the checkbox beside the event to exclude the event from the filter.

    Features

    Enter the AV, Firewall, and/or vulnerability signature and/or engine to filter for.

    Bookmarks

    Displays the list of saved filter settings. Displays only after you have saved a bookmark. Click the Bookmark button to name and save filter settings. Click a bookmark to use the saved settings. Click the x beside a bookmark to delete it.

    Search

    Click the Search button to apply the filter setting.

    Reset

    Click the Reset button to clear the filter settings.

    Bookmark

    Click the Bookmark button to save the filter settings as a bookmark.

  4. Click Search. The filtered list of endpoints displays.
  5. Click Reset to clear the filter settings.