endpoint-control settings

Use this command to designate logical timeout intervals and storage for DLP fingerprinting database.

History

The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.

Command	Description
set forticlient-offline-grace {enable | disable} set forticlient-offline-grace-interval <seconds>	Allow an offline grace period for registered and offline FortiClients so that PROBE can be processed and, as a result, endpoint compliance is not triggered. Set the grace interval between 60-600 seconds (the default is set to 120).
set forticlient-ems-rest-api-call-timeout <milliseconds>	FortiClient Enterprise Management Server (EMS) REST API call timeout in milliseconds, as part of FortiClient EMS compliance. Set the range between 500 - 30000. The default is 5000.

config endpoint-control settings
    set forticlient-reg-key-enforce {enable | disable}   Enable/disable requiring or enforcing FortiClient registration keys.
    set forticlient-reg-key {password_string}   FortiClient registration key. size[128]
    set forticlient-reg-timeout {integer}   FortiClient registration license timeout (days, min = 1, max = 180, 0 means unlimited). range[0-180]
    set download-custom-link {string}   Customized URL for downloading FortiClient. size[127]
    set download-location {fortiguard | custom}   FortiClient download location (FortiGuard or custom).
            fortiguard  You can download FortiClient from FortiGuard.
            custom      Specify a custom location for downloading FortiClient. Used when you can't access FortiGuard.
    set forticlient-offline-grace {enable | disable}   Enable/disable grace period for offline registered clients.
    set forticlient-offline-grace-interval {integer}   Grace period for offline registered FortiClient (60 - 600 sec, default = 120). range[60-600]
    set forticlient-keepalive-interval {integer}   Interval between two KeepAlive messages from FortiClient (20 - 300 sec, default = 60). range[20-300]
    set forticlient-sys-update-interval {integer}   Interval between two system update messages from FortiClient (30 - 1440 min, default = 720). range[30-1440]
    set forticlient-avdb-update-interval {integer}   Period of time between FortiClient AntiVirus database updates (0 - 24 hours, default = 8). range[0-24]
    set forticlient-warning-interval {integer}   Period of time between FortiClient portal warnings (0 - 24 hours, default = 1). range[0-24]
    set forticlient-user-avatar {enable | disable}   Enable/disable uploading FortiClient user avatars.
    set forticlient-dereg-unsupported-client {enable | disable}   Enable/disable deregistering unsupported FortiClient endpoints.
    set forticlient-ems-rest-api-call-timeout {integer}   FortiClient EMS call timeout in milliseconds (500 - 30000 milliseconds, default = 5000). range[500-30000]
end

download-custom-link <url>

Note: This entry is only available when download-location is set to custom.

Customized URL for downloading FortiClient.

download-location {fortiguard | custom}

FortiClient download location. The default is set to fortiguard.

forticlient-avdb-update-interval <hours>

Period of time in hours between FortiClient AntiVirus database updates. Set the value between 0-24. The default is set to 8.

forticlient-keepalive-interval <seconds>

Period of time in seconds between two KeepAlive messages from FortiClient. Set the value between 20-300 (or 20 seconds to five minutes). The default is set to 60.

forticlient-reg-key <key>

Note: This entry is only available when forticlient-reg-key-enforce is set to enable.

FortiClient registration key.

forticlient-reg-key-enforce {enable | disable}

Enable or disable (by default) the enforcement of FortiClient registration key.

forticlient-reg-timeout <days>

FortiClient registration license timeout in days. Set the value between 1-180 (or one day to approximately six months). The default is set to 7. Set to 0 for no timeout.

forticlient-sys-update-interval <minutes>

Period of time in minutes between two system update messages from FortiClient. Set the value between 30-1440 (or 30 minutes to one day). The default is set to 720.

forticlient-user-avatar {enable | disable}

Enable (by default) or disable uploading of FortiClient user avatars.

forticlient-warning-interval <hours>

Period of time in hours between the FortiClient warning portal being shown. Set the value between 0-24. The default is set to 1.