FortiClient EMS

https://docs.fortinet.com/document/forticlient/7.4.7/ems-administration-guide/
Admin
FortiClient EMS is an endpoint management server for deploying, managing, and monitoring FortiClient...
Tokens:1,158,106
Snippets:20,314
Trust Score:10
Update:2 months ago
Show doc for...
Tokens:
Raw
### Example CLI commands for specific teams

Source: https://docs.fortinet.com/document/forticlient/7.4.7/ems-administration-guide/122790

Examples of applying different installer IDs for HR, Marketing, and Office Management teams using the .exe installer.

```bash
FortiClientSetup_7.4.7_x64.exe /v"GROUP_TAG=HR"
```

```bash
FortiClientSetup_7.4.7_x64.exe /v"GROUP_TAG=Marketing"
```

```bash
FortiClientSetup_7.4.7_x64.exe /v"GROUP_TAG=OM"
```

--------------------------------

### Detailed Host Software Inventory Export

Source: https://docs.fortinet.com/document/forticlient/7.4.7/ems-administration-guide/919955

Example of a detailed CSV export containing host, OS, user, and installation path information.

```csv
host,os_type,username,name,vendor,version,install_date,install_dir

"""Bilbo""","""WIN64""","""test""","""Add Folder Suggestions dialog""","""Microsoft Corporation""","""10.0.19041.1023""","""2021-08-06""","""C:\Windows\SystemApps\Microsoft.Windows.AddSuggestedFoldersToLibraryDialog_cw5n1h2txyewy"""

"""Bilbo""","""WIN64""","""test""","""App Installer""","""Microsoft Corporation""","""1.19.11071.0""","""2023-06-12""","""C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.19.11071.0_x64__8wekyb3d8bbwe"""

"""Bilbo""","""WIN64""","""test""","""Assigned Access Lock app""","""Microsoft Corporation""","""1000.19041.1023.0""","""2021-08-06""","""C:\Windows\SystemApps\Microsoft.Windows.AssignedAccessLockApp_cw5n1h2txyewy"""

"""Bilbo""","""WIN64""","""test""","""AsyncTextService""","""Microsoft Corporation""","""10.0.19041.1023""","""2021-08-06""","""C:\Windows\SystemApps\Microsoft.AsyncTextService_8wekyb3d8bbwe"""

"""Bilbo""","""WIN64""","""test""","""Captive Portal Flow""","""Microsoft Corporation""","""10.0.19041.1023""","""2021-08-06""","""C:\Windows\SystemApps\Microsoft.Windows.OOBENetworkCaptivePortal_cw5n1h2txyewy"""

"""Bilbo""","""WIN64""","""test""","""CapturePicker""","""Microsoft Corporation""","""10.0.19041.1023""","""2021-08-06""","""C:\Windows\SystemApps\Microsoft.Windows.CapturePicker_cw5n1h2txyewy"""

"""Bilbo""","""WIN64""","""test""","""Cortana""","""Microsoft Corporation""","""4.2204.13303.0""","""2023-06-12""","""C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe"""

"""Bilbo""","""WIN64""","""test""","""Credential Dialog""","""Microsoft Corporation""","""10.0.19041.1023""","""2021-08-06""","""C:\Windows\SystemApps\microsoft.creddialoghost_cw5n1h2txyewy"""

"""Bilbo""","""WIN64""","""test""","""Email and accounts""","""Microsoft Corporation""","""10.0.19041.1023""","""2021-08-06""","""C:\Windows\SystemApps\Microsoft.AccountsControl_cw5n1h2txyewy"""

"""Bilbo""","""WIN64""","""test""","""Eye Control""","""Microsoft Corporation""","""10.0.19041.1023""","""2021-08-06""","""C:\Windows\SystemApps\Microsoft.ECApp_8wekyb3d8bbwe"""

"""Bilbo""","""WIN64""","""test""","""Feedback Hub""","""Microsoft Corporation""","""1.2304.1243.0""","""2023-06-12""","""C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2304.1243.0_x64__8wekyb3d8bbwe"""

"""Bilbo""","""WIN64""","""test""","""FortiClient EMS AD Connector""","""Fortinet Technologies Inc""","""7.33.793.0""","""2023-06-12""","""C:\Program Files\Fortinet\FortiClientEMSADConnector\"""

"""Bilbo""","""WIN64""","""test""","""FortiClient""","""Fortinet Technologies Inc""","""7.2.1.0779""","""2023-06-12""","""C:\Program Files\Fortinet\FortiClient\"""

"""Bilbo""","""WIN64""","""test""","""Get Help""","""Microsoft Corporation""","""10.2303.10961.0""","""2023-06-12""","""C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2303.10961.0_x64__8wekyb3d8bbwe"""

"""Bilbo""","""WIN64""","""test""","""Google Chrome""","""Google LLC""","""114.0.5735.198""","""2023-06-26""","""C:\Program Files\Google\Chrome\Application"""
```

--------------------------------

### Example XML Configuration for FortiClient

Source: https://docs.fortinet.com/document/forticlient/7.4.7/ems-administration-guide/914884/ipsec-vpn-over-tcp

Partial XML configuration for an IPsec VPN connection in FortiClient.

```xml
<?xml version="1.0" ?>
<forticlient_configuration>
    <vpn>
        <enabled>1</enabled>
        <sslvpn>
            <connections/>
            <options>
                <dnscache_service_control>0</dnscache_service_control>
                <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
                <negative_split_tunnel_metric/>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>1</prefer_sslvpn_dns>
                <no_dns_registration>0</no_dns_registration>
                <preferred_dtls_tunnel>0</preferred_dtls_tunnel>
                <block_ipv6>1</block_ipv6>
                <show_auth_cert_only>0</show_auth_cert_only>
                <use_gui_saml_auth>0</use_gui_saml_auth>
            </options>
        </sslvpn>
        <ipsecvpn>
            <connections>
                <connection>
                    <name>v2_psk_120</name>
                    <uid>FE3DDC0A-C4D4-48CB-8FF6-3B88EED55A03</uid>
                    <machine>0</machine>
                    <keep_running>0</keep_running>
                    <disclaimer_msg/>
                    <single_user_mode>0</single_user_mode>
                    <type>manual</type>
```

--------------------------------

### Example of a Processed Software Inventory CSV File

Source: https://docs.fortinet.com/document/forticlient/7.4.7/ems-administration-guide/919955

This CSV format displays application name, vendor, PUA category, and installation count for selected operating systems.

```csv
name,vendor,pua_category_name,install_count

"""Microsoft Edge""","""Microsoft Corporation""",""""""","""4"""

"""ms-resource:AppxManifest_DisplayName""","""Microsoft Corporation""",""""""","""4"""

"""Windows Shell Experience""","""Microsoft Corporation""",""""""","""4"""

"""Microsoft Visual C++ 2015 UWP Runtime Package""","""Microsoft Platform Extensions""",""""""","""4"""

"""WindowsAppRuntime.1.3""","""Microsoft Corporation""",""""""","""3"""

"""Microsoft Edge Update""",""""""",""""""","""2"""

"""Work or school account""","""Assigned by your organization""",""""""","""2"""

"""Your account""","""Email, phone, or Skype""",""""""","""2"""

"""FortiClient""","""Fortinet Technologies Inc""",""""""","""2"""

"""Google Chrome""","""Google LLC""",""""""","""2"""

"""Narrator""","""Microsoft""",""""""","""2"""

"""NcsiUwpApp""","""Microsoft""",""""""","""2"""

"""Add Folder Suggestions dialog""","""Microsoft Corporation""",""""""","""2"""

"""App Installer""","""Microsoft Corporation""",""""""","""2"""

"""Assigned Access Lock app""","""Microsoft Corporation""",""""""","""2"""

"""AsyncTextService""","""Microsoft Corporation""",""""""","""2"""

"""Captive Portal Flow""","""Microsoft Corporation""",""""""","""2"""

"""CapturePicker""","""Microsoft Corporation""",""""""","""2"""

"""Cortana""","""Microsoft Corporation""",""""""","""2"""

"""Credential Dialog""","""Microsoft Corporation""",""""""","""2"""

"""Email and accounts""","""Microsoft Corporation""",""""""","""2"""

"""Eye Control""","""Microsoft Corporation""",""""""","""2"""

"""Feedback Hub""","""Microsoft Corporation""",""""""","""2"""

"""Get Help""","""Microsoft Corporation""",""""""","""2"""

"""HEIF Image Extensions""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft .Net Native Framework Package 1.7""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft .Net Native Framework Package 2.2""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft .Net Native Runtime Package 1.7""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft .Net Native Runtime Package 2.2""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft 365 (Office)""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Content""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Edge DevTools Client""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Edge WebView2 Runtime""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft family features""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Pay""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft People""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Photos""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Sticky Notes""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Store""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Tips""","""Microsoft Corporation""",""""""","""2"""

"""Microsoft Update Health Tools""","""Microsoft Corporation""",""""""","""2"""

"""Movies & TV""","""Microsoft Corporation""",""""""","""2"""

"""MSN Weather""","""Microsoft Corporation""",""""""","""2"""

"""ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/AppManifest_OutlookDesktop_DisplayName""","""Microsoft Corporation""",""""""","""2"""

"""ms-resource:Common.View.UWP/Resources/StoreAppName""","""Microsoft Corporation""",""""""","""2"""

"""ms-resource:LensSDK/Resources/AppStoreName""","""Microsoft Corporation""",""""""","""2"""

"""ms-resource:XboxApp.Resource/Resources/App_Title""","""Microsoft Corporation""",""""""","""2"""

"""Network Connection Flow""","""Microsoft Corporation""",""""""","""2"""

"""OneNote for Windows 10""","""Microsoft Corporation""",""""""","""2"""

"""Paint 3D""","""Microsoft Corporation""",""""""","""2"""

"""Phone Link""","""Microsoft Corporation""",""""""","""2"""

"""PinningConfirmationDialog""","""Microsoft Corporation""",""""""","""2"""

"""Snip & Sketch""","""Microsoft Corporation""",""""""","""2"""
```

--------------------------------

### FortiClient XML Configuration for Auto Transport

Source: https://docs.fortinet.com/document/forticlient/7.4.7/ems-administration-guide/914884/ipsec-vpn-over-tcp

Example XML configuration for FortiClient remote access settings.

```xml
<?xml version="1.0" ?>
<forticlient_configuration>
    <vpn>
        <enabled>1</enabled>
        <sslvpn>
            <connections/>
            <options>
                <dnscache_service_control>0</dnscache_service_control>
                <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                <disallow_invalid_server_certificate>0</disallow_invalid_server_certificate>
                <negative_split_tunnel_metric/>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>1</prefer_sslvpn_dns>
                <no_dns_registration>0</no_dns_registration>
                <preferred_dtls_tunnel>0</preferred_dtls_tunnel>
```
Tokens:
Raw