Configuring EMS on FortiPAM

To configure EMS on FortiPAM:

1. Go to Security Fabric > Fabric Connectors.
2. In the Core Network Security pane, select FortiClient EMS and then select Edit.

   The New Fabric Connector window opens.

3. In Name, enter a name of the FortiClient EMS connector.
4. In IP/Domain name, enter the IP address of the FortiClient EMS.
5. In HTTPS port, enter the HTTPS port number for the FortiClient EMS.

   In this example, 10443 is used.

6. Ensure that EMS Threat Feed and Synchronize firewall addresses options are enabled.
7. Click OK.

   

   The Verify EMS Server Certificate window is displayed.

   

8. Click Accept.

   The FortiClient EMS Status pane is displayed.

   

9. Click Close.

   The FortiClient EMS is up.

   

Error connecting to the EMS server

If there is an error connecting to the EMS server in step 7 when Configuring EMS on FortiPAM:

1. Log in to the EMS server and click Authorize in the Fabric Device Authorization Requests dialog to add FortiPAM.
2. If no Fabric Device Authorization Requests dialog appears when you log in to the EMS server:
   1. Go to Administration > Fabric Devices and locate FortiPAM.
   2. Click Authorize.
3. Log in to FortiPAM and go to Security Fabric > Fabric Connectors.
4. Select the previously created FortiClient EMS and then select Edit.
5. In FortiClient EMS Status, select Authorize.
6. In the Verify EMS Server Certificate window that appears, click Accept.

   FortiPAM is now connected to the EMS successfully.

To view the ZTNA tags from the EMS server:

1. Go to System > ZTNA and select the ZTNA Tags tab to see available tags from the EMS server.