Chapter 16 SSL VPN : Basic configuration : Additional configuration options : Host check
  
Host check
When you enable AV, FW, or AV-FW host checking in the web portal Security Control settings, each client is checked for security software that is recognized by the Windows Security Center. As an alternative, you can create a custom host check that looks for security software selected from the Host Check list. For more information, see “Portal configuration”.
The Host Check list includes default entries for many security software products.
 
Host integrity checking is only possible with client computers running Microsoft Windows platforms.
To configure host checking - CLI:
To configure the full-access portal to check for AV and firewall software on client Windows computers, you would enter the following:
config vpn ssl web portal
edit full-access
set host-check av-fw
end
To configure the full-access portal to perform a custom host check for FortiClient Host Security AV and firewall software, you would enter the following:
config vpn ssl web portal
edit full-access
set host-check custom
set host-check-policy FortiClient-AV FortiClient-FW
end