Fortinet white logo
Fortinet white logo

Administration Guide

Installing a FortiEDR Collector on Windows

Installing a FortiEDR Collector on Windows

  1. It is recommended to get a pre-populated customized Collector installer for Windows, as described in Requesting and obtaining a Collector installer.
  2. Run the FortiEDR Collector installation file. Use the FortiEDRCollectorInstaller32.msi file if you are using a 32-bit operating system; or use the FortiEDRCollectorInstaller64.msi file if you are using a 64-bit operating system.

  3. Click Next.

  4. Leave the default FortiEDR Collector installation folder or change it as necessary. Click Next.

  5. If a non-customized installer is used, in the Aggregator Address field, specify the FortiEDR Aggregator domain name or IP address.
  6. If a non-customized installer is used, in the Port field, specify the FortiEDR Aggregator port (8081).
    Note

    When upgrading a FortiEDR Collector, the Aggregator address field can be left empty – in order to retain the previously defined Aggregator address.

  7. If a non-customized installer is used, in the Registration Password field, enter the device registration password that is defined in Configuring the FortiEDR Central Manager server and console.
    Note

    If you forget the registration password, retrieve it under Administration > Tools > Component authentication in the Central Manager console.

  8. For a multi-organization FortiEDR system, enter the name of the organization in the Organization field. For more details, see the Collector registration.
  9. If you are installing the Collector on a VDI environment, check the VDI checkbox. For more details, see Working with FortiEDR on VDI environments.
  10. If you use a web proxy to filter requests in this device’s network, then check the Use System Proxy Settings checkbox. Note that Windows must be configured to use a proxy and tunneling must be allowed from the Collector to the Aggregator on port 8081 and from the Collector to the Core on port 555. (Run as Administrator: netsh winhttp set proxy <proxy IP >).
  11. If you are installing the Collector on a Citrix PVS golden image, check the Citrix PVS installation checkbox.
  12. Click Next twice to start the installation. Windows may possibly display a message requesting that you confirm the installation. Please do so.
  13. After the installation of the FortiEDR Collector has been successfully completed, the following window displays:

    Check Windows Services to verify that the FortiEDR Collector Service is running, as shown below:
  14. Verify that the FortiEDR Collector details are listed in the INVENTORY tab of the FortiEDR Central Manager console (see Inventory. Select the New filter to display a list of newly registered FortiEDR Collectors, as shown below:
  15. If another AV product is also installed on the machine, exclude AV exceptions by following the instructions in Exclusion paths.

Installing a FortiEDR Collector on Windows

Installing a FortiEDR Collector on Windows

  1. It is recommended to get a pre-populated customized Collector installer for Windows, as described in Requesting and obtaining a Collector installer.
  2. Run the FortiEDR Collector installation file. Use the FortiEDRCollectorInstaller32.msi file if you are using a 32-bit operating system; or use the FortiEDRCollectorInstaller64.msi file if you are using a 64-bit operating system.

  3. Click Next.

  4. Leave the default FortiEDR Collector installation folder or change it as necessary. Click Next.

  5. If a non-customized installer is used, in the Aggregator Address field, specify the FortiEDR Aggregator domain name or IP address.
  6. If a non-customized installer is used, in the Port field, specify the FortiEDR Aggregator port (8081).
    Note

    When upgrading a FortiEDR Collector, the Aggregator address field can be left empty – in order to retain the previously defined Aggregator address.

  7. If a non-customized installer is used, in the Registration Password field, enter the device registration password that is defined in Configuring the FortiEDR Central Manager server and console.
    Note

    If you forget the registration password, retrieve it under Administration > Tools > Component authentication in the Central Manager console.

  8. For a multi-organization FortiEDR system, enter the name of the organization in the Organization field. For more details, see the Collector registration.
  9. If you are installing the Collector on a VDI environment, check the VDI checkbox. For more details, see Working with FortiEDR on VDI environments.
  10. If you use a web proxy to filter requests in this device’s network, then check the Use System Proxy Settings checkbox. Note that Windows must be configured to use a proxy and tunneling must be allowed from the Collector to the Aggregator on port 8081 and from the Collector to the Core on port 555. (Run as Administrator: netsh winhttp set proxy <proxy IP >).
  11. If you are installing the Collector on a Citrix PVS golden image, check the Citrix PVS installation checkbox.
  12. Click Next twice to start the installation. Windows may possibly display a message requesting that you confirm the installation. Please do so.
  13. After the installation of the FortiEDR Collector has been successfully completed, the following window displays:

    Check Windows Services to verify that the FortiEDR Collector Service is running, as shown below:
  14. Verify that the FortiEDR Collector details are listed in the INVENTORY tab of the FortiEDR Central Manager console (see Inventory. Select the New filter to display a list of newly registered FortiEDR Collectors, as shown below:
  15. If another AV product is also installed on the machine, exclude AV exceptions by following the instructions in Exclusion paths.