When FortiClient Telemetry is connected to EMS, FortiClient collects the following data about the endpoint and its workload and sends it to EMS:
- Hardware information, such as MAC addresses
- Software information, such as the OS version on the endpoint
- Identification information, such as username, avatar, and hostname
- Vulnerability information that the vulnerability scanning module reports
When EMS is participating in the Security Fabric, the Security Fabric uses the information to understand the endpoint and its workload to better protect it.