Corporate Security Policies
Overview
FortiClient Endpoint Security Version 4.1 Administration Guide
04-41-99556-20090626
27
http://docs.fortinet.com/
•
Feedback
Corporate Security Policies
Corporate Security Policies can be set up to enforce the use of certain FortiClient features.
This is commonly used to ensure that users of remote VPN connections are in compliance
with the established security policies.
This chapter contains the following sections:
•
Overview
•
Configuring a corporate security policy
Overview
You can set a security policy for your managed FortiClient computer. Users cannot use a
VPN connection unless the FortiClient settings comply with the policy. The security policy
can require that any or all of the following features are enabled:
• Antivirus (real-time protection)
• Antispam
• Firewall (Normal mode)
• Web Filter
This provides security when users connect to your corporate network through a VPN.
User view of security policy
If a corporate security policy is set, the FortiClient Console General tab includes a
Corporate Policy Compliance section that displays the compliance status of the FortiClient
computer.
Figure 1: Corporate policy compliance status - in compliance
If the user disables any of the required features, the FortiClient computer is no longer in
compliance with the policy. If a VPN tunnel is in use, it is disconnected. The Corporate
Policy Compliance status changes to show the following.
Figure 2: Corporate policy compliance status - not in compliance
The user can bring FortiClient settings into compliance again by selecting the check box.
