Forticlient EMS Complete Course - Endpoint Management Server

Build a lab with an active directory domain and DNS, install FortiClient EMS on Windows 10, integrate Active Directory with EMS to auto-import users and push configurations to 40 endpoints.

Configure EMS licenses, including free trial and paid options, and enable remote web access. Integrate Active Directory with EMS to auto-import OUs, enable LDAP logins, and manage AD-based administrators.

Prepare Windows endpoints for Forticlient deployment with essential services and firewall rules, then apply the default profile and policy via Forticlient EMS group policy.

Explore Forticlient EMS endpoints by configuring policies and profiles, assigning deployment packages, and adjusting priorities. See how to upgrade 40 clients from 6.2.5 to 6.4.3 with one click.

Install forticlient on non-domain joined computers by preparing windows services and firewall rules, downloading the deployment package, and connecting endpoints to the EMS over ports 8013 and 443.

Learn how to uninstall 40 Forticlient endpoints from EMS by creating a server group, configuring deployment, and managing reboots to complete the uninstallation.

Learn the essential Forticlient EMS communication ports and services, including 8013 for endpoint management, 80/443 for downloads and web access, 389 for active directory, and 8000 for FortiGate integration.

Create domain and work groups, move endpoints, and apply policies, then automate grouping with group assignment rules based on IP, installer ID, or OS.

Explore classes of malware from viruses and worms to trojans and ransomware, how they spread, and how spam emails, phishing sites, and rootkits enable attacks in enterprise endpoint management.

Explore web filtering in Forticlient EMS, enabling always-on or off fabric filtering, configuring categories and safe search, managing per-category actions, exclusions, and plugin-based https enforcement for endpoints.

Enable and configure the Forticlient EMS application firewall to detect application traffic, block social media by category, use overrides to allow Instagram, and monitor and notify blocked attempts.

Identify and mitigate endpoint vulnerabilities with FortiClient EMS by patching software, running automatic or manual vulnerability scans, and applying FortiGuard vulnerability signatures to reduce risk.

Learn how to push SSL or IPsec VPN configurations from FortiClient EMS to 40 clients, including corporate and personal VPNs, and manage DNS cache and certificate settings.

Explore sandbox detection, using static and dynamic analysis to counter zero-day attacks. Learn deployment options and how the 40 client and sandbox interact, with quarantine and alert remediation.

View software inventory across all endpoints, showing vendor, version, last installed date, and install count; filter by host or user and enable sending installed applications to EMS.

Explore zero trust tags to group devices by criteria such as OS, AD group, IP range, and vulnerabilities, then apply tags to security policies via FortiClient EMS and FortiGate integration.

Establish a FortiGate–EMS connector via SSL to transfer endpoint data, tags, and Active Directory groups from FortiClient EMS to FortiGate, enabling tag-based security policies and compliance checks.

Explore FortiClient EMS administration, including built-in super administrator, restricted and standard roles, endpoint administrator permissions, domain and LDAP integration, login restrictions, and managing users, settings, and logs.

Configure system settings in Forticlient EMS, including server name, ip address, https access via fqdn, port and certificate options, logging, smtp alerts, and endpoint quarantine and web filter features.