FortiClient EMS – Centralized Endpoint and VPN Management (FORTI3)

Networking, Fortinet

FortiClient EMS provides a single console to manage and deploy endpoints, configure remote access at scale and enforce access policies, covering VPN and ZTNA. The course explains EMS architecture, integration with FortiGate and FortiAnalyzer and core security posture controls and telemetry.

In hands-on labs you'll practice endpoint provisioning, client rollout and policy creation, including SAML via Microsoft Entra ID and AD Connector. Learn deployment packages, invitation-based installs and how to configure SSL VPN, IPSec over TCP and ZTNA with ZTNA tags for access control.

THIS TRAINING COURSE WILL HELP YOU:

  • Understand differences between FortiGate, FortiOS and Remote Access
  • Configure and manage FortiClient EMS, including HA and failover
  • Implement SAML via Microsoft Entra ID and AD Connector
  • Deploy FortiClient with Deployment Packages and invitation codes
  • Create endpoint policies and configure SSL VPN, IPSec and ZTNA

WHO SHOULD ATTEND?

  • Network administrators and security engineers
  • Endpoint administrators and MDM administrators
  • DevOps and system admins managing VPN and remote access
  • IT architects planning Zero Trust and Fortinet integration
  • Technicians responsible for deployment and FortiAnalyzer monitoring

COURSE LOCATION AND AVAILABLE DATES



Choose whether to attend in person in our classroom or join online. You can select your preferred format during registration. Learn more about hybrid training.
Brno + online (optional)
Praha + online (optional)
Need this course in English?

Public courses are usually delivered in Czech, but this course is also available in English. We can arrange private training for your team online, at your premises or in our classrooms, and tailor the content to your needs.

For groups of around 4 or more participants, private training can already be comparable in price to booking individual places on a public course. Send us your requirements and we’ll recommend the best format and provide an exact quote.

Request training in English

Course content:

Hide details
  • Comparison: FortiGate vs FortiOS vs Remote Access
    1. Sunsetting of SSL VPN
    2. IPSec over TCP
    3. Agentless VPN
    4. ZTNA
  • Introduction to FortiClient Editions and FortiClient EMS
    1. FortiClient VPN only, FortiClient VPN/ZTNA, FortiClient EPP/ATP
    2. FortiClient EMS — HA and Failover
  • Basic administration
    1. Use of SAML via Microsoft Entra ID
    2. Multi-tenancy options and MDM support
  • Authentication options
    1. Microsoft Entra ID and Active Directory
    2. AD Connector (FortiClient EMS Cloud)
  • LAB1: FortiGate + FortiClient EMS
    1. Basic FortiClient EMS setup
    2. Connecting FortiClient EMS with FortiGate
    3. SAML configuration for Entra ID; use in EMS and FortiGate admin access
  • FortiClient Deployment
    1. Deployment Packages and Zero Trust Telemetry
    2. Secure Access, Vulnerability Scan, APT protection
    3. Security features: Web Filtering, Application Firewall, ZTNA, etc.
  • FortiClient Deployment Package
    1. Invitation code and user verification
    2. FortiClient installation workflow
  • Provisioning
    1. Endpoint Policy
    2. On-Fabric detection
    3. Endpoint Management
    4. Endpoint Profiles
  • LAB2: FortiClient EMS
    1. Deploy FortiClient to a workstation; connect to EMS and verify via Entra ID
    2. Create On-Fabric detection rules, Endpoint Policies and Endpoint Profiles (Web Filter, Vulnerability Scan, Application Firewall, Removable Media Access)
  • Remote Access options
    1. Security Posture Tags
    2. SSL VPN and IPSec over TCP
    3. ZTNA
  • LAB3: FortiGate + FortiClient EMS
    1. Using ZTNA Tags within the LAN
    2. Configure SSL VPN with SAML auth and ZTNA Tags
    3. Configure IPSec over TCP with SAML auth and ZTNA Tags
    4. Configure ZTNA with SAML authentication
  • LAB4: Integration of FortiGate and FortiClient EMS with FortiAnalyzer
Prerequisites:
Basic understanding of networking and endpoint administration.
Recommended previous course:
FortiGate – Firewall Configuration and Management (FORTI1)
Schedule:
2 days (9:00-17:00)
Price per person:
792.00 € ( 958.32 € incl. 21% VAT)

Training and learning environment

Physical Fortinet FortiGate hardware firewalls mounted in a server rack.
Will I work with real hardware during the Fortinet training?Yes, for practical configuration practice, you will use our hardware lab with physical Fortinet FortiGate firewalls. Each participant works on their own dedicated device running the latest version of FortiOS.
Web interface of a virtual environment showing client stations and servers connected to a physical firewall.
How do we connect the virtual lab with physical firewalls in Fortinet courses?Each student receives a dedicated simulated corporate network with client stations and servers. This virtual environment is directly connected to your assigned physical FortiGate device where you perform the actual network security configuration.
IT classroom with desks, computer monitors, and a projection screen at the front.
What does the environment for in-person IT courses look like?We hold training courses in our own classrooms equipped with modern computer equipment for each participant and a large projection screen. Each workstation is fitted with a powerful computer for seamless practical exercises, and the environment supports a calm, friendly atmosphere during training.
IT classroom with desks, computer monitors, and a projection screen at the front.
Do I need to bring my own laptop to the classroom IT course?Our training rooms are fully equipped, so you do not need to bring your own laptop. A modern computer with all necessary hardware and software is ready for you at your workstation.
Sample ICT Pro certificate of successful completion of an IT training course.
Will you receive an official certificate after completing an IT course?Yes, upon successful completion of the training course, you will receive an official ICT Pro certificate confirming your participation and acquired technical skills. You can use it to verify your qualifications or add it to your professional profile.
Exterior view of the COMGUARD office building on Sochorova Street in Brno.
Where can you find our training center in Brno?The premises of the ICT Pro training center are located on the 1st floor of the COMGUARD building at Sochorova 38 in Brno. Positioned on the border of Žabovřesky and Komín, the location is easily accessible by both car and public transport.
Exterior view of the Opatov Park office building in Prague, Chodov.
Where can you find our training center in Prague?The premises of the ICT Pro training center are located on the 1st floor of the Opatov Park building at Líbalova 1, Prague 11 – Chodov. The location provides a comfortable environment for your education with convenient access.
Fully equipped kitchenette with a coffee machine, microwave, sink, and shelves with cups and glasses.
What facilities and refreshments are available to you during training breaks?Our training centers feature a fully equipped kitchenette for a comfortable break during your courses. The facilities include a coffee machine, microwave, kettle, and a wide selection of drinks and snacks.
Coffee station featuring an automatic coffee machine, yellow and white cups, glasses, and syrups.
What beverage refreshments are available during your course?A beverage station with a coffee machine, teas, syrups, and water is at your disposal throughout the entire training session. You can enjoy a coffee or another drink of your choice anytime during breaks.
Table with sweet pastries, fruit syrups, a water dispenser, and glasses set up for training participants.
What light refreshments are provided for you during the courses?During course breaks, participants can enjoy light sweet snacks, pastries, and fruit syrups to mix their own drinks. Fresh water dispenser and plates are also available for your convenience.
Wicker baskets filled with packaged savory snacks, sweet biscuits, and snack bars.
Should I bring my own snacks to ICT Pro training?There is no need to. A wide selection of savory snacks, sweet biscuits, and snack bars is available for you during breaks. Boost your energy for all-day focus right inside the training center premises.
Outdoor wooden terrace with green surroundings by the glass building of the training center.
Can you spend training breaks in the fresh air?Yes, an outdoor terrace is available at our training center. During breaks between learning sessions, you can relax in the fresh air in a pleasant green environment.
Spacious outdoor wooden terrace with seating and views of the surrounding area.
Where can you relax during course breaks?Our training center features a spacious outdoor terrace with seating options. During breaks between learning sessions, you can step outside to relax and recharge in the fresh air.