Enabling Endpoint Control
Endpoint Network Access Control
FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
32
04-40001-99556-20090626
http://docs.fortinet.com/
•
Feedback
Uploading the FortiClient installer to your FortiGate unit
If you selected
This FortiGate
as the
FortiClient Installer Download Location
, you need to
upload the FortiClient installer to the FortiGate unit.
The FortiClient installer file name must begin with “FortiClientSetup_”, followed by the
version number, “4.0.2”, for example. You can upload either a .msi or .exe package.
To upload the FortiClient installer to the FortiGate unit
1
Place your installer file on a TFTP server that the FortiGate unit can access.
2
Connect to the FortiGate unit’s command line interface (CLI).
You can connect to the CLI through the FortiGate console, using SSH or Telnet (if
enabled), or by using the CLI Console window that is part of the web-based manager.
3
Enter the following CLI command
execute restore forticlient tftp <filename> <server_ip>
where
<filename>
is, for example,
FortiClientSetup_4.0.2.msi
and
<server_ip>
is the IP address of the TFTP server.
The TFTP server uploads the file to the FortiGate unit.
For more information about using the CLI, refer to the
FortiGate CLI Reference
.
4
You can see the currently stored version of FortiClient software in the System
Information section of the FortiGate unit dashboard. To view the dashboard, go to
System > Status
.
Enabling Endpoint Control
In order for a FortiGate unit to monitor applications, enforce antivirus and firewall use, and
ensure antivirus definitions are up to date on FortiClient, do the following:
• Create an Endpoint Control profile
• Create an application detection list
• Apply an Endpoint Control profile to a firewall policy
After these steps are completed, you can then monitor the endpoints.
Creating Endpoint Control profiles
Create endpoint control profiles so that you can apply them to firewall policies. This allows
the FortiGate unit to monitor which applications are running and installed through
FortiClient and enable the enforcement of FortiClient features such as antivirus and
firewall.
