Fortinet black logo

EMS Administration Guide

Quarantining endpoints

Quarantining endpoints

You can quarantine an endpoint using EMS. Quarantined endpoints cannot access the network.

To quarantine an endpoint:
  1. Go to Endpoints.
  2. Click All Endpoints, a domain, or workgroup. A list of endpoints displays.
  3. Click an endpoint, and from the Action menu, select Quarantine.

    The endpoint status changes to Quarantined, and the endpoint is quarantined with the next FortiClient Telemetry communication.

    You can remove an endpoint from quarantine by right-clicking the endpoint and selecting Unquarantine. The endpoint is removed from quarantine with the next FortiClient Telemetry communication and network access is restored.

    Note you can also provide the endpoint user with a one-time access code. The user can enter the code to access FortiClient on a quarantined endpoint, then remove the endpoint from quarantine in the FortiClient console. The code is available under Quarantine Access Code after selecting a quarantined endpoint as seen below.

Quarantining endpoints

You can quarantine an endpoint using EMS. Quarantined endpoints cannot access the network.

To quarantine an endpoint:
  1. Go to Endpoints.
  2. Click All Endpoints, a domain, or workgroup. A list of endpoints displays.
  3. Click an endpoint, and from the Action menu, select Quarantine.

    The endpoint status changes to Quarantined, and the endpoint is quarantined with the next FortiClient Telemetry communication.

    You can remove an endpoint from quarantine by right-clicking the endpoint and selecting Unquarantine. The endpoint is removed from quarantine with the next FortiClient Telemetry communication and network access is restored.

    Note you can also provide the endpoint user with a one-time access code. The user can enter the code to access FortiClient on a quarantined endpoint, then remove the endpoint from quarantine in the FortiClient console. The code is available under Quarantine Access Code after selecting a quarantined endpoint as seen below.