In FortiOS, endpoint profiles are called FortiClient profiles. You can import a FortiClient profile into EMS, then edit the profile in FortiClient EMS to add a FortiClient installer or add configuration information that supports the FortiGate compliance rules.
To import profiles successfully from FortiOS to FortiClient EMS, FortiGate must have the HTTPS port open. In FortiOS, go to Network > Interfaces > Restrict Access > Enable checkbox for HTTPS.
- Click Endpoint Profiles > Manage Profiles > Import. The Import Profiles from FortiGate window opens.
- Complete the following options, and click Connect.
Enter the IP address and port of the FortiGate device from which the profile is being imported, in the format:
Enter a VDOM name from the FortiGate if applicable.
Enter the FortiGate's login username.
Enter the FortiGate's login password.
The list of FortiClient profiles configured on the FortiGate displays.
Under each profile name is the list of profiles created for different operating systems, such as desktops running a Windows or Mac operating system or devices running an Android operating system. For example, under the default profile, Desktop, Android and iOS profiles are listed. You can click the </> icon beside each profile to preview the settings in XML format.
- Select the profiles to import into EMS and click Import.
Select the name of the profile to import all profiles for it into EMS. You can also clear the checkbox beside the profiles you do not want to import into EMS. For example, you can import the desktop and iOS profiles, but not the Android profile for a given profile name.
The selected profiles are imported into EMS and display under the Endpoint Profiles pane in a group named after the FortiGate device from which they were imported.
- In the Endpoint Profiles page, select an imported profile to edit it.
The options configured in the profile by the FortiGate administrator are read-only compliance rules. You cannot change them. You can edit additional options to provide configuration information to support the compliance rules. You can also add a FortiClient installer to the profile by using the Deployment tab. Custom installers can be created. See Adding FortiClient installers.
- Edit the options on the tabs.
- Click Save Profile.