Fortinet black logo

EMS Administration Guide

Adding an endpoint policy

Adding an endpoint policy

To add an endpoint policy:
  1. Go to Endpoint Policy > Manage Policies.
  2. Click Add.
  3. Complete the following fields:

    Endpoint Policy Name

    Enter the desired name for the endpoint policy.

    Endpoint Groups

    Select the device and/or user group to apply the policy to. You can select a group from all imported domains and workgroups.

    Users

    Search for and select desired domain users to apply the policy to.

    Profile

    Include an endpoint profile in the policy. From the dropdown list, select the desired endpoint profile.

    Profile (Off-Net)

    Include an endpoint profile in the policy to apply to the endpoint when it is off-net according to the on-net detection rules configured in this policy. For example, you may want to apply a more restrictive profile to the endpoint when it is determined to be off-net. From the dropdown list, select the desired endpoint profile.

    If including an off-net profile in a policy, it is highly recommended to also include on-net detection rules in the policy. Otherwise, EMS may not apply on-net and off-net profiles as desired.

    On-Net Detection Rules

    Select the on-net detection rules to include in the policy. You can select multiple rules.

    You must have already created on-net detection rules to include them in an endpoint policy. See On-net Detection Rules.

    Telemetry Server List

    Include a Telemetry server list in the policy. From the dropdown list, select the desired Telemetry server list.

    You must have already created a Telemetry server list to include one in an endpoint policy. See Creating a Telemetry server list.

    Comments

    Enter any comments desired for the endpoint policy.

    Enable the Policy

    Toggle to enable or disable the endpoint policy. You can enable or disable the policy at a later time from Endpoint Policy > Manage Policies.

  4. Click Save. You can view the newly created policy on the Endpoint Policy > Manage Policies page.

    EMS pushes these settings to the endpoint with the next Telemetry communication.

Adding an endpoint policy

To add an endpoint policy:
  1. Go to Endpoint Policy > Manage Policies.
  2. Click Add.
  3. Complete the following fields:

    Endpoint Policy Name

    Enter the desired name for the endpoint policy.

    Endpoint Groups

    Select the device and/or user group to apply the policy to. You can select a group from all imported domains and workgroups.

    Users

    Search for and select desired domain users to apply the policy to.

    Profile

    Include an endpoint profile in the policy. From the dropdown list, select the desired endpoint profile.

    Profile (Off-Net)

    Include an endpoint profile in the policy to apply to the endpoint when it is off-net according to the on-net detection rules configured in this policy. For example, you may want to apply a more restrictive profile to the endpoint when it is determined to be off-net. From the dropdown list, select the desired endpoint profile.

    If including an off-net profile in a policy, it is highly recommended to also include on-net detection rules in the policy. Otherwise, EMS may not apply on-net and off-net profiles as desired.

    On-Net Detection Rules

    Select the on-net detection rules to include in the policy. You can select multiple rules.

    You must have already created on-net detection rules to include them in an endpoint policy. See On-net Detection Rules.

    Telemetry Server List

    Include a Telemetry server list in the policy. From the dropdown list, select the desired Telemetry server list.

    You must have already created a Telemetry server list to include one in an endpoint policy. See Creating a Telemetry server list.

    Comments

    Enter any comments desired for the endpoint policy.

    Enable the Policy

    Toggle to enable or disable the endpoint policy. You can enable or disable the policy at a later time from Endpoint Policy > Manage Policies.

  4. Click Save. You can view the newly created policy on the Endpoint Policy > Manage Policies page.

    EMS pushes these settings to the endpoint with the next Telemetry communication.