FortiEDR Connect

The FortiEDR Connect feature opens a console that provides direct access to FortiEDR-protected devices (endpoints) that are running a Windows operating system through a remote Shell connection, as described in FortiEDR Connect. This enables you to respond to incidents immediately and to perform in-depth investigation by running commands on the device, running scripts on the device, collecting and downloading forensic data from the device, remediating threats and so on.

Select the Allow FortiEDR Connect - Remote Shell Connection checkbox to enable the FortiEDR Connect functionality for the organization. Otherwise, the Connect to Device button is deactivated for all users of the organization.

To further allow a user access to the FortiEDR Connect functionality, select the Establish FortiEDR Connect sessions checkbox in the user profile. Otherwise, the Connect to Device button is deactivated for the user. For more information about user roles and permissions, see Users.

The Establish FortiEDR Connect sessions checkbox is available for Admin, Analyst, and Senior Analyst users only.