Introduction

FortiEndpoint Best Practices Service is an account-based annual subscription providing access to a specialized team that delivers remote guidance on deployment, upgrades, and operations. The service allows customers to share information about their deployment, user requirements, resources, and other related items. Based on the information provided, the BPS experts can provide recommended best practices, sample code, links to tools, and other materials or assistance to speed up adoption and guide the customer towards best practice deployments. The team does not log into customer devices to make changes for them. This is a consulting and guidance service which may include sample configurations or playbooks. This is not an on-site professional services offer.

Note that for integration with other Fortinet products, configuration guidance is only provided for FortiClient EMS, FortiClient, and FortiEDR.

Below are some examples of what the Best Practice Service can help with:

• Product Overview:

  • FortiClient EMS and FortiClient

  • FortiEDR

• Initial setup:

  • AD/Entra integration

  • Agent preparation

• RBAC and LDAP/AD integration:

  • Grouping endpoints

  • Assigning profiles

• Fortinet Security Fabric integration:

  • EMS connector

  • Endpoint tags

  • FortiAnalyzer logging

  • XDR

• Endpoint policy:

  • Assigning profiles to users or devices

  • Provisioning profiles

  • Advice on grouping like endpoints

  • Security, communication control, and Threat Hunting profile

• Endpoint profile:

  • Configuring security features to accomplish security needs

  • Effects and caution when enabling specific features

• Client deployment:

  • Supported OSes (Windows, Mac, Servers (Windows + Linux))

  • Deploying from EMS

• Remote access (EMS side):

  • VPN configuration

  • Auto-connect

  • Always up

  • VPN before logon

• ZTNA onboarding

• Events tuning and analysis

The FortiEndpoint BPS team provides best practice services only for FortiClient EMS, FortiClient, and FortiEDR. For other Fortinet products (FortiGate, FortiAnalyzer, etc.), please contact sales to inquire about available services like Professional Services or Jump Start.