Configuring web filtering
Per-User Web Filtering
FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
44
04-40001-99556-20090626
http://docs.fortinet.com/
•
Feedback
• assign web filter profiles to groups and users
Managing FortiClient computers
FortiClient Manager can search for FortiClient computer on your network. FortiClient
applications must be configured at installation with the IP addresses or subnets on which
they accept remote management.
Optionally, you can lock the FortiClient application settings so that users, even those with
administrative privileges, cannot change the application’s settings unless they know the
password configured on the FortiManager unit.
To set FortiClient Manager options
1
In the FortiClient Manager, go to
Settings > System > System Setting
.
2
In the
FortiClient Lockdown
section, if you want to lock the configuration on the
FortiClient computer that you add, select
Enable Lockdown
and then enter a password.
If you want to apply lockdown to existing clients, select
Apply Lockdown Setting to All
.
3
In the
Client Discovery
section, check that the ports that connect to your network are
enabled to listen for broadcast and unicast requests from FortiClient computer.
4
To add new FortiClient computer directly to the
Managed clients
list, select
Auto-
populate managed client list
. Otherwise, select
Add to temporary client list
.
5
Click
Apply
.
To search for FortiClient computer
1
In the FortiClient Manager, go to
Client/Group > Client
and select
Search/Add New
.
2
Do one of the following:
• Select
Lookup single client
and enter the IP address of the FortiClient computer.
• Select
Scan attached networks
, select the interface that connects to the network
and enter the IP address and subnet mask of the network to scan.
3
Click
Search
.
4
If you selected the
Add to temporary clients
option (see
“To set FortiClient Manager
options”
), discovered FortiClient computer are listed in the
Temporary Client list
.
Otherwise, discovered FortiClient computer are added to the
Managed Client list
.
Configuring FortiClient installations to request registration
You can configure the FortiClient application to request management from a particular
FortiManager unit. Depending on the FortiClient Manager settings, the FortiClient
computer appears on the Temporary clients list or is added automatically to the Managed
clients list.
Install the FortiClient application using the Microsoft Installer (the .msi file in the .zip
package). Start the installer from the command line as follows to enable central
management by a FortiManager server. Type the command on a single line.
msiexec /i FortiClient.msi FMGRENABLED=1 FMGRTRUSTEDIPS=<IP>
FMGRENABLEDISCOVER=1
<IP>
is the address of the FortiManager unit
