Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

EMS Administration Guide

FortiClient EMS 6.0.0

Chromebook management merged to regular FortiClient EMS

You can now use a single FortiClient EMS console to manage all FortiClient platforms, including Chromebooks. All FortiClient endpoints can be managed from a single FortiClient EMS installation. Previously, a separate FortiClient EMS for Chromebooks install was needed to manage Chromebook clients. See Configuring Server settings.

Automatic quarantine from Fortinet Security Fabric

FortiClient EMS 6.0.0 supports automatic quarantine of suspicious FortiClient endpoints from the Security Fabric. An automated rule can be defined in FortiOS 6.0 to quarantine suspicious (IOC) FortiClient endpoints. API authorization must be enabled on the FortiGate for this feature to work. See Quarantining an endpoint from FortiOS using EMS using an API.

Automatic group assignment

Automatic group assignment allows you to dynamically group endpoints based on installer tags. Instead of manually creating or moving endpoints to custom groups, you can create rules which allow FortiClient EMS to automatically create dynamic groups and move endpoints to preassigned groups. See Group assignment rules.

Quarantine file management

FortiClient EMS 6.0.0 introduces central quarantine management, which shows a central view of all file-based threats detected and quarantined by FortiClient. You can restore and whitelist a quarantined file on endpoints with a single click in the case of false-positive detections. This feature requires FortiClient 6.0.0 or later versions. See Quarantine Management.

Endpoint installed software inventory

FortiClient EMS 6.0.0 introduces the Software Inventory management feature where administrators can centrally track software usage for all managed endpoints. The Software Inventory dashboard includes the name, publisher, and version of software installed on all managed endpoints. See Software Inventory.

Customize endpoint system quarantine message

You can now customize the quarantine message displayed on a user's FortiClient Console. This feature requires FortiClient 6.0.0 or later versions. See Customizing the endpoint quarantine message.

FortiClient EMS 6.0.0

Chromebook management merged to regular FortiClient EMS

You can now use a single FortiClient EMS console to manage all FortiClient platforms, including Chromebooks. All FortiClient endpoints can be managed from a single FortiClient EMS installation. Previously, a separate FortiClient EMS for Chromebooks install was needed to manage Chromebook clients. See Configuring Server settings.

Automatic quarantine from Fortinet Security Fabric

FortiClient EMS 6.0.0 supports automatic quarantine of suspicious FortiClient endpoints from the Security Fabric. An automated rule can be defined in FortiOS 6.0 to quarantine suspicious (IOC) FortiClient endpoints. API authorization must be enabled on the FortiGate for this feature to work. See Quarantining an endpoint from FortiOS using EMS using an API.

Automatic group assignment

Automatic group assignment allows you to dynamically group endpoints based on installer tags. Instead of manually creating or moving endpoints to custom groups, you can create rules which allow FortiClient EMS to automatically create dynamic groups and move endpoints to preassigned groups. See Group assignment rules.

Quarantine file management

FortiClient EMS 6.0.0 introduces central quarantine management, which shows a central view of all file-based threats detected and quarantined by FortiClient. You can restore and whitelist a quarantined file on endpoints with a single click in the case of false-positive detections. This feature requires FortiClient 6.0.0 or later versions. See Quarantine Management.

Endpoint installed software inventory

FortiClient EMS 6.0.0 introduces the Software Inventory management feature where administrators can centrally track software usage for all managed endpoints. The Software Inventory dashboard includes the name, publisher, and version of software installed on all managed endpoints. See Software Inventory.

Customize endpoint system quarantine message

You can now customize the quarantine message displayed on a user's FortiClient Console. This feature requires FortiClient 6.0.0 or later versions. See Customizing the endpoint quarantine message.