Creating An Application Detection List - Fortinet Version 4.0 MR1 Administration Manual

Endpoint Network Access Control

Creating an Application Detection List

FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
04-40001-99556-20090626
http://docs.fortinet.com/ • Feedback
Figure 5: New Endpoint NAC Profile window.
To create an Endpoint Control profile
1 Go to Endpoint NAC > Profile and click Create New.
2 Enter the name for the Endpoint NAC Profile.
3 Select the following options:
• Notify Hosts to Install FortiClient (warn only) — If a user attempts to access the
internet without FortiClient installed, a message to install FortiClient and a
"Continue to Website" link is displayed. The user can access the internet via the
link. This allows for a gradual rollout of FortiClient to all users without restricting
internet access.
• Quarantine Hosts to User Portal (enforce compliance) — If a user attempts to
access the internet without FortiClient installed, a message to install FortiClient is
shown. The user cannot access the internet until FortiClient is installed.
4 Select the Additional Client Options check box and select the following options:
• Antivirus enabled — Checks that the FortiClient Endpoint Security application
has the antivirus feature enabled.
• Antivirus up-to-date — Checks that the FortiClient Endpoint Security application
has the latest version of the antivirus signatures available from FortiGuard
Services.
• Firewall enabled — Checks that the FortiClient mode is set to Normal.
5 Select the Enable Application Detection check box and select the Application Detection
List to use the application detection feature. See
List".
6 Click OK.
You can create the list of applications to be monitored through the FortiGate unit. You can
determine which applications are allowed, monitored, or blocked from the FortiGate unit.
The application detection list is applied to the Endpoint Control Profile.
The list of available categories, vendors, and applications come from the FortiGuard
signature database and can be viewed in the Predefined tab.
Enabling Endpoint Control
"Creating an Application Detection
33