Fortinet black logo

EMS Administration Guide

Feature Select

In Feature Select, you can choose which features to show and hide in EMS. Only features that are enabled in Feature Select are available for configuration in an endpoint profile. For example, if you disable Application Firewall in Feature Select, the Application Firewall tab is not available for configuration for any endpoint profile, and EMS cannot deploy the Application Firewall feature to any endpoints.

Only an EMS superadministrator can enable and disable features in Feature Select. Other EMS users can view which features are enabled and disabled on the Feature Select page, but cannot modify the configuration.

If an endpoint previously had a feature enabled, but you later disable the feature in Feature Select, EMS then disables the feature on the endpoint.

The following table provides details on features that you must enable for certain functionalities to be available in FortiClient. You must enable the feature in Feature Select, then configure on the applicable endpoint profile for the functionality to be available in FortiClient. Note that this table is not exhaustive:

Feature to enable in Feature Select

FortiClient functionalities

Application Firewall

  • C&C blocking
  • Endpoint quarantine

Web Filter

  • Category-based malicious site blocking
  • Keyword blocking (also requires web browser plugin)
To enable/disable a feature in Feature Select:
  1. Go to System Settings > Feature Select.
  2. Enable or disable features as desired. This example disables Application Firewall.

  3. Click Save. The Application Firewall tab is no longer available for configuration in an endpoint profile.

In Feature Select, you can choose which features to show and hide in EMS. Only features that are enabled in Feature Select are available for configuration in an endpoint profile. For example, if you disable Application Firewall in Feature Select, the Application Firewall tab is not available for configuration for any endpoint profile, and EMS cannot deploy the Application Firewall feature to any endpoints.

Only an EMS superadministrator can enable and disable features in Feature Select. Other EMS users can view which features are enabled and disabled on the Feature Select page, but cannot modify the configuration.

If an endpoint previously had a feature enabled, but you later disable the feature in Feature Select, EMS then disables the feature on the endpoint.

The following table provides details on features that you must enable for certain functionalities to be available in FortiClient. You must enable the feature in Feature Select, then configure on the applicable endpoint profile for the functionality to be available in FortiClient. Note that this table is not exhaustive:

Feature to enable in Feature Select

FortiClient functionalities

Application Firewall

  • C&C blocking
  • Endpoint quarantine

Web Filter

  • Category-based malicious site blocking
  • Keyword blocking (also requires web browser plugin)
To enable/disable a feature in Feature Select:
  1. Go to System Settings > Feature Select.
  2. Enable or disable features as desired. This example disables Application Firewall.

  3. Click Save. The Application Firewall tab is no longer available for configuration in an endpoint profile.