When FortiClient Telemetry is connected to FortiGate or EMS, you may be unable to disable realtime protection. You can disable realtime protection when EMS has not locked FortiClient and realtime protection is excluded from FortiGate compliance rules.
You can disable realtime protection but leave the following options enabled: Block malicious websites and Block known attack communication channels.
- On the Malware Protection tab, click the Settings icon.
The realtime protection settings page opens.
- Clear the Scan files as they are downloaded or copied to my system checkbox and close the settings window.