Fortinet black logo

Administration Guide

FortiGate and EMS

FortiGate and EMS

When FortiClient has connected Telemetry to EMS and to FortiGate, FortiClient calculates on-net/off-net information. The following examples show how FortiClient determines the endpoint status:

  1. The endpoint has an on-net status when the endpoint is behind a FortiGate and receives option 224 with the FortiGate serial number. In this case, the FortiGate is the DHCP server, and the FortiGate checks that the serial number matches its own serial number.
  2. If option 224 is not received or there is no match with the currently registered serial number, FortiClient determines on-net/off-net status based on the DHCP on-net/off-net setting in EMS. See EMS only.
  3. Otherwise, FortiClient determines on-net/off-net status based on the on-net subnets received from EMS. See EMS only.
  4. FortiClient sends the determined on-net/off-net status to EMS.

FortiGate and EMS

When FortiClient has connected Telemetry to EMS and to FortiGate, FortiClient calculates on-net/off-net information. The following examples show how FortiClient determines the endpoint status:

  1. The endpoint has an on-net status when the endpoint is behind a FortiGate and receives option 224 with the FortiGate serial number. In this case, the FortiGate is the DHCP server, and the FortiGate checks that the serial number matches its own serial number.
  2. If option 224 is not received or there is no match with the currently registered serial number, FortiClient determines on-net/off-net status based on the DHCP on-net/off-net setting in EMS. See EMS only.
  3. Otherwise, FortiClient determines on-net/off-net status based on the on-net subnets received from EMS. See EMS only.
  4. FortiClient sends the determined on-net/off-net status to EMS.