Fortinet black logo

Assigning the profile to endpoints

6.0.3
Copy Link
Copy Doc ID 071aa83e-d7c4-11e8-8784-00505692583a:416130
Download PDF

Assigning the profile to endpoints

After creating the profile, you can assign the profile to the domain or a group within the domain. When you assign the profile to a domain or group, the profile settings are automatically pushed to all endpoints in the specified domain or group.

If you do not assign a profile to a specific domain or group, EMS automatically applies the default profile.

  1. Go to Endpoints.
  2. Right-click a domain or group, select Assign profile, then the profile. A confirmation dialog displays.
  3. Click Yes. The profile is assigned.

Once the profile is assigned to a specified domain or group and the start time configured in Creating a FortiClient installer is reached, EMS deploys FortiClient to the endpoints. The profile controls the endpoint's FortiClient configuration. FortiClient connects Telemetry to the FortiGate specified in the gateway list and the EMS server specified in the installer.

After initial deployment of FortiClient, you can use the profile to change the endpoint's FortiClient configuration. To push configuration changes to endpoints, simply make changes to the endpoint's assigned profile. EMS syncs the configuration changes to FortiClient on the endpoint. You can check the Endpoints pane to see if the endpoint's synchronization status.

The below shows an endpoint that is not synchronized with the latest profile configuration changes.

The below shows an endpoint that is synchronized with the latest profile configuration changes.

Assigning the profile to endpoints

After creating the profile, you can assign the profile to the domain or a group within the domain. When you assign the profile to a domain or group, the profile settings are automatically pushed to all endpoints in the specified domain or group.

If you do not assign a profile to a specific domain or group, EMS automatically applies the default profile.

  1. Go to Endpoints.
  2. Right-click a domain or group, select Assign profile, then the profile. A confirmation dialog displays.
  3. Click Yes. The profile is assigned.

Once the profile is assigned to a specified domain or group and the start time configured in Creating a FortiClient installer is reached, EMS deploys FortiClient to the endpoints. The profile controls the endpoint's FortiClient configuration. FortiClient connects Telemetry to the FortiGate specified in the gateway list and the EMS server specified in the installer.

After initial deployment of FortiClient, you can use the profile to change the endpoint's FortiClient configuration. To push configuration changes to endpoints, simply make changes to the endpoint's assigned profile. EMS syncs the configuration changes to FortiClient on the endpoint. You can check the Endpoints pane to see if the endpoint's synchronization status.

The below shows an endpoint that is not synchronized with the latest profile configuration changes.

The below shows an endpoint that is synchronized with the latest profile configuration changes.