system endpoint-control
Use this command to set a FortiClient EMS connector.
To use this command, your administrator account’s access control profile must have either w or rw permission to the sysgrp area. For details, see Permissions.
Syntax
config system endpoint-control fctems
edit <ems_connector_name>
set server <IP_address>
set https-port <port>
set server-verification {enable | disable}
set ca-cert <cert_name>
set source-ip <IP_address>
set call-timeout <int>
set preserve-ssl-session {enable | disable}
set fingerprint <fingerprint>
set EMS_SN <EMS_EN>
next
end
| Variable | Description | Default |
|
<ems_connector_name> |
Enter the name of the EMS connector. | No default. |
|
server <IP_address> |
Enter the EMS server IP address. | No default. |
|
https-port <port> |
Enter the HTTPS access port number. |
443 |
|
Enable this option to verify the FortiClient EMS certificate that is used for the HTTPS connection between FortiWeb and FortiClient EMS. |
disable |
|
|
ca-cert <cert_name> |
Select the certificate for verifying FortiClient EMS server certificate that is used for the connection between FortiWeb and FortiClient EMS. |
No default. |
|
source-ip <IP_address> |
Enter the allowed source IP addresses of the API calls. |
0.0.0.0 |
|
call-timeout <int> |
Enter the timeout value for the API calls from FortiWeb to EMS server. |
15 |
|
preserve-ssl-session {enable | disable} |
Enable/disable preservation of EMS SSL session connection. |
disable |
|
fingerprint <fingerprint> |
Enter the EMS server fingerprint. |
automatically populated once EMS is verified. |
|
EMS_SN <EMS_EN> |
Enter the EMS server serial number. |
automatically populated once EMS is verified. |
|
It's highly recommended not to change the default value of the variables except <ems_connector_name>, server <IP_address>, and https-port <port>. |