Chapter 16 SSL VPN for FortiOS 5.0 : Basic Configuration : Additional configuration options : Host check
  
Host check
When you enable AV, FW, or AV-FW host checking in the web portal Security Control settings, each client is checked for security software that is recognized by the Windows Security Center. As an alternative, you can create a custom host check that looks for security software selected from the Host Check list. For more information, see “Portal configuration”.
The Host Check list includes default entries for many security software products.
 
Host integrity checking is only possible with client computers running Microsoft Windows platforms.
To configure host checking - CLI
To configure the full-access portal to check for AV and firewall software on client Windows computers, you would enter the following:
config vpn ssl web portal
edit full-access
set host-check av-fw
end
To configure the full-access portal to perform a custom host check for FortiClient Host Security AV and firewall software, you would enter the following:
config vpn ssl web portal
edit full-access
set host-check custom
set host-check-policy FortiClient-AV FortiClient-FW
end
See Also
Creating a custom host check list
Routing in tunnel mode
Changing the port number for web portal connections
SSL offloading
Customizing the web portal login page
Windows OS check
Configuring cache cleaning
Configuring virtual desktop
Configuring client OS Check
Adding WINS and DNS services for clients
Setting the idle timeout setting
SSL VPN logs
Monitoring active SSL VPN sessions