FortiClient EMS Cloud support 6.2.3

The FortiGate Security Fabric root device can link to FortiClient Cloud (a cloud-based EMS solution) for endpoint connectors and automation. Both cloud-based and on-premise EMS servers are supported.

To enable cloud-based EMS services, FortiGate must be registered to FortiCloud with an appropriate user account. Only one FortiClient EMS Cloud server can be configured.

To add a cloud-based and an on-premise EMS server in the GUI:

1. Go to Security Fabric > Settings.
2. Enable FortiClient Endpoint Management System (EMS).
3. Add an EMS server.
4. Set EMS Type to EMS Cloud.
5. Enter a name, such as cloud_ems.

   

6. Add another EMS server.
7. Set EMS Type to EMS.
8. Enter a name, such as ems136.
9. Enter server's IP address, admin user name, and admin password. Optionally, you can also change the HTTPS port.

   

10. Click Apply.
11. FortiClient EMS fabric connectors are automatically created for the EMS servers.

    

12. Test connectivity with the EMS server:
    1. Go to Security Fabric > Settings and go to the FortiClient Endpoint Management System (EMS) section.
    2. In the Connection status field, click Test Connectivity.

       

To add a cloud-based EMS server in the CLI:

1. Enable authentication of FortiClient EMS Cloud through a FortiCloud account:

   config endpoint-control fctems
       edit <name>
           set fortinetone-cloud-authentication enable
       next
   end

2. Configure a FortiClient EMS Cloud server connection:

   config user fsso
       edit "cloud_ems_fsso_connector"
           set type fortiems-cloud
           set password ******
           set source-ip <class_ip>
       next
   end