You can import a Web Filter profile from FortiOS into FortiClient EMS, then edit the profile in FortiClient EMS to add a FortiClient installer or other configuration details.
To import Web Filter profiles successfully from FortiOS to FortiClient EMS, FortiGate must be open to HTTPS access. In FortiOS, go to Network > Interfaces, select the desired port, and under Administrative Access, enable the HTTPS checkbox.
- Click Endpoint Profiles > Manage Profiles > Import > From FortiGate / FortiManager. The Import Profiles from FortiGate/FortiManager window opens.
- Under Type, select FortiGate.
- Complete the following options, and click Next.
Enter the IP address and port of the FortiGate from which the profile is being imported, in the format:
Enter a VDOM name from the FortiGate if applicable.
Enter a username for the FortiGate.
Enter the password for the user account entered above.
The list of Web Filter profiles configured on the FortiGate displays.
You can click the </> icon beside each profile to preview the settings in XML format.
- Select the profiles to import into FortiClient EMS and click Next.
- Under Synchronization Mode, select one of the following options.
- One Time Pull: FortiClient EMS does not automatically sync profile changes from the FortiGate. You can manually sync profile changes after importing the profile. See Syncing profile changes.
- Group Schedule: Configure a group synchronization schedule for all selected profiles. Select the next date and time to automatically update the profiles, and the profile update interval in days, hours, or seconds.
- Individual Schedule: Configure an individual synchronization schedule for each selected profile. Select the next date and time to automatically update each profile, and the profile update interval in days, hours, or seconds.
- Click Import. EMS imports the selected profiles and displays them in Endpoint Profiles > Manage Profiles in a group named after the FortiGate that they were imported from.
- In the Endpoint Profiles page, select an imported profile. Click Edit.
You can modify settings on the Web Filter tab. When the next profile synchronization occurs between FortiOS and EMS, settings from the Web Filter profile in FortiOS overwrite any Web Filter settings modified in EMS. For Web Filter settings that are available in EMS but are not available for configuration in FortiOS, the EMS settings are preserved.
You can edit other tabs on the profile to provide additional configuration information. You can also add a FortiClient deployment package to the profile by using the Deployment tab. See Adding a FortiClient deployment package.
- Edit the options on the tabs.
- Click Save Profile.