Monitoring Endpoints - Fortinet FortiGate Series Administration Manual

Monitoring endpoints

Monitoring endpoints
700
Figure 435: Creating Endpoint NAC profiles
Profile list
Create New
Name
FortiClient Enforcement
Application Detection List
Delete
Edit
Endpoint NAC Profile settings
Name
For non-compliant hosts:
Notify hosts to install
FortiClient (warn only)
Quarantine hosts to user
portal (enforce compliance)
Additional Client Options
Anti-virus Enabled
Anti-virus Up-to-date
Firewall Enabled
Enable Application Detection
Application Detection List
To view the list of known endpoints, go to Endpoint NAC > Endpoints. An endpoint is
added to the list when it uses a firewall policy that has Endpoint NAC enabled.
Create a new Endpoint NAC profile.
The name of the Endpoint NAC profile.
Green check mark icon - enabled.
Grey X icon - not enabled.
The application detection list specified in this profile.
Delete this profile.
Edit this profile.
Enter a name for the Endpoint NAC profile.
Enable one of the following options:
Allow users to continue browsing without installing
FortiClient Endpoint Security.
Keep endpoint quarantined until user installs FortiClient
Endpoint Security.
Enable to enforce any of the following:
Require that the antivirus feature is enabled.
Require that the antivirus signatures are up-to-date.
Require that the firewall feature is enabled.
Enable to check applications on the endpoint against an
application detection list.
Select the application detection list to use.
FortiGate Version 4.0 MR1 Administration Guide
Endpoint NAC
Delete
Edit
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback