Managing Forticlient Computers - Fortinet Version 4.0 MR1 Administration Manual

Configuring web filtering

Managing FortiClient computers

Configuring FortiClient installations to request registration
44
• assign web filter profiles to groups and users
FortiClient Manager can search for FortiClient computer on your network. FortiClient
applications must be configured at installation with the IP addresses or subnets on which
they accept remote management.
Optionally, you can lock the FortiClient application settings so that users, even those with
administrative privileges, cannot change the application's settings unless they know the
password configured on the FortiManager unit.
To set FortiClient Manager options
1 In the FortiClient Manager, go to Settings > System > System Setting.
2 In the FortiClient Lockdown section, if you want to lock the configuration on the
FortiClient computer that you add, select Enable Lockdown and then enter a password.
If you want to apply lockdown to existing clients, select Apply Lockdown Setting to All.
3 In the Client Discovery section, check that the ports that connect to your network are
enabled to listen for broadcast and unicast requests from FortiClient computer.
4 To add new FortiClient computer directly to the Managed clients list, select Auto-
populate managed client list. Otherwise, select Add to temporary client list.
5 Click Apply.
To search for FortiClient computer
1 In the FortiClient Manager, go to Client/Group > Client and select Search/Add New.
2 Do one of the following:
• Select Lookup single client and enter the IP address of the FortiClient computer.
• Select Scan attached networks, select the interface that connects to the network
and enter the IP address and subnet mask of the network to scan.
3 Click Search.
4 If you selected the Add to temporary clients option (see
options"), discovered FortiClient computer are listed in the Temporary Client list.
Otherwise, discovered FortiClient computer are added to the Managed Client list.
You can configure the FortiClient application to request management from a particular
FortiManager unit. Depending on the FortiClient Manager settings, the FortiClient
computer appears on the Temporary clients list or is added automatically to the Managed
clients list.
Install the FortiClient application using the Microsoft Installer (the .msi file in the .zip
package). Start the installer from the command line as follows to enable central
management by a FortiManager server. Type the command on a single line.
msiexec /i FortiClient.msi FMGRENABLED=1 FMGRTRUSTEDIPS=<IP>
FMGRENABLEDISCOVER=1
<IP> is the address of the FortiManager unit
FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
Per-User Web Filtering
"To set FortiClient Manager
04-40001-99556-20090626
http://docs.fortinet.com/ • Feedback