Endpoint Protection applies to users attempting to make a connection that is controlled by a firewall policy that specifies a FortiClient profile. The user of a non-compliant endpoint using a web browser receives a replacement message HTML page from the FortiGate unit. The message explains the non-compliance. Depending on the FortiClient profile, the user may be allowed to continue or is blocked from further access. For information about modifying these replacement pages, see “Modifying the Endpoint Protection replacement messages”.