FortiClient Manager : Configuring FortiClient agent settings : Configuring system settings of a FortiClient agent
 
Configuring system settings of a FortiClient agent
You can configure a FortiClient agent’s settings. You can also inherit system settings from the group to which the agent belongs.
To configure FortiClient agent system settings:
1. In the FortiClient Manager, select Client/Group > Client > Managed Client in the navigation pane.
2. In the All Managed Clients list, select the FortiClient agent you want from the Host Name column.
3. From the FortiClient menu, select General > System Setting.
Base Setting
 
Override
This option is visible only if the FortiClient agent belongs to a group.
The FortiClient agent’s configuration includes settings inherited from the group. Selecting override allows you to modify the inherited system settings on this FortiClient agent. Deselecting override means that you want to use the system settings inherited from the group to which the agent belongs.
 
Show FortiClient console when user starts Windows
If selected, the FortiClient program will automatically run when the FortiClient agent starts up.
 
Hide the tray icon
Select to hide the FortiClient icon in the system tray. It will be active after FortiClient is restarted.
 
The tray icon does not flash
Select to not have the tray icon flash during antivirus scanning.
 
Raise alerts to FortiManager
If selected, the FortiClient agent will send alert information to the FortiManager unit.
 
Activated features
Select the features to be activated in FortiClient.
When selected, the features will appear in FortiClient and the feature's services will affect the system.
When clear, the features will be removed from FortiClient and the feature's services will be completely inactive. When deactivated, the features should still be configurable from FortiClient Manager although the configuration will not have any affect on the device.
If the feature was not installed by the MSI, then it is not possible to activate the feature.
To use this effectively, the full FortiClient product needs to be installed. It is possible to repackage the MSI so that although the feature is installed and it is initially 'deactivated'.
 
The interval of heartbeat message sent to FortiManager
Enter the number of seconds (10-300)
 
Validation type
Select the license validation type: Standard or Enterprise.
 
Update Server Setting
 
Retrieve update package from
Select the source of FDS updates (antivirus, web filter, email filtering):
public FortiGuard network
the FortiManager unit for this agent
another server that you specify
 
Failover Port
Enter a valid port number.
 
Connection Timeout
Enter the connection timeout (60-600) in seconds. The default is 60.
 
If connection to customer server fails, try public FortiGuard network
Select to use the FortiGuard network if your enterprise server fails.
 
Update Schedule
 
Enable Schedule update
Select to enable the update schedule. Enter the Daily time in hour and minutes or the number of hours.
Proxy setting
 
Enable proxy for
If internet access from the FortiClient agent is installed on is via a proxy server, FortiClient may need to be configured with the details of that proxy so that it can
Updates - obtain updates
Virus submission - Submit suspicious files for analysis
Online SCEP - Perform certificate operations with remote servers.
 
Proxy/ Type/ IP Address/ Port
Select the proxy type and enter the IP address and port number for the proxy server.
 
User, Password
Enter the user name and password for the proxy server.
FortiProxy Setting
 
The highest port number the proxy should listen on
Enter the number of ports the server can bind to. It should bind to as many ports as it needs starting at the highest port number specified here.
If you have other server service that requires a specific port be left open, you should set the highest port number for FortiProxy to be less than that port number.
 
Disable FTP proxy
Select to disable the FTP proxy. FortiProxy tests network connectivity by sending packets to a designated IP address.
 
Disable selftest
Select to disable self test and enter the IP address used to test the network availability.
 
Disable SMTP client comforting/
Disable POP3 client comforting/
Disable POP3 server comforting
Some email clients may expect response packets from the smtp/pop3 server quickly after the packet was sent.
Because FortiProxy may cache the outgoing packets, and incoming server response until all the packets are scanned for malware/spam, the client application may throw a “response timeout” error. When client comforting is enabled, FortiProxy will "drip" packets to the client at a rate that is fast enough to stop the client from erroring, but slow enough to stop the entire response being sent to the client before the response from the server is fully scanned. Select the check boxes to disable these features.