Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

FortiGate and EMS

The version of FortiOS and EMS affects how on-net, off-net, or online status is determined.

FortiClient 6.0.4 with FortiGate and EMS 6.0.0 and later

When FortiClient 6.0.4 with FortiGate and EMS 6.0.0 and later, FortiClient calculates on-net/off-net information. The following examples show how FortiClient determines the endpoint status.

  1. The endpoint has an on-net status when the endpoint is behind a FortiGate and receives option 224 with the FortiGate serial number. In this case, FortiGate is the DHCP server, and FortiGate checks that the serial number matches its own serial number.
  2. If option 224 is not received or there is no match with the currently registered serial number, FortiClient determines on-net/off-net status based on the DHCP on-net/off-net setting in EMS. See EMS only.
  3. Otherwise, FortiClient determines on-net/off-net status based on the on-net subnets received from EMS. See EMS only.
  4. FortiClient sends the determined on-net/off-net status to EMS.
FortiClient 6.0.4 with FortiGate and EMS versions prior to 6.0.0
  1. FortiGate determines the on-net/off-net status. See FortiGate only.
  2. FortiClient sends the on-net/off-net status to EMS.

FortiGate and EMS

The version of FortiOS and EMS affects how on-net, off-net, or online status is determined.

FortiClient 6.0.4 with FortiGate and EMS 6.0.0 and later

When FortiClient 6.0.4 with FortiGate and EMS 6.0.0 and later, FortiClient calculates on-net/off-net information. The following examples show how FortiClient determines the endpoint status.

  1. The endpoint has an on-net status when the endpoint is behind a FortiGate and receives option 224 with the FortiGate serial number. In this case, FortiGate is the DHCP server, and FortiGate checks that the serial number matches its own serial number.
  2. If option 224 is not received or there is no match with the currently registered serial number, FortiClient determines on-net/off-net status based on the DHCP on-net/off-net setting in EMS. See EMS only.
  3. Otherwise, FortiClient determines on-net/off-net status based on the on-net subnets received from EMS. See EMS only.
  4. FortiClient sends the determined on-net/off-net status to EMS.
FortiClient 6.0.4 with FortiGate and EMS versions prior to 6.0.0
  1. FortiGate determines the on-net/off-net status. See FortiGate only.
  2. FortiClient sends the on-net/off-net status to EMS.