Endpoint Control Daemon Improvement
Endpoint Control has been improved in several ways:
• For FortiGate models 3000 and higher, the maximum limit of FortiClient registration licence has been increased from 8000 to 16000.
• The intervals between KeepAlive messages are now configurable on the FortiGate unit, so that the interval value can be adjusted to get a trade-off between accuracy and the FortiGate workload. This value can be configured in the CLI:
set forticlient-keepalive-interval <interval> (interval measured in seconds).
• The intervals between two system update messages can be configured through the CLI:
set forticlient-sys-update-interval <interval> (interval measured in minutes).
• KeepAlive timestamps are now be stored use a in-memory avl tree structure, in order to decrease the number of CMDB savings.
• A mixed TCP/UDP mechanism now handles the registration sync.
• FortiClient registration information is stored using a hard disk instead of flash disk.