Refer to the exhibits.
Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?
Based on the FortiGate Security Fabric settings shown in the exhibits, to successfully quarantine an endpoint when it is detected as a compromised host (IOC), the following step is required:
Enable Remote HTTPS Access to EMS: This setting allows FortiGate to communicate securely with FortiClient EMS over HTTPS. Remote HTTPS access is essential for the quarantine functionality to operate correctly, enabling the EMS server to receive and act upon the quarantine commands from FortiGate.
Therefore, the administrator must enable remote HTTPS access to EMS to allow the quarantine process to function properly.
Reference
FortiGate Infrastructure 7.2 Study Guide, Security Fabric and Integration with EMS Sections
Fortinet Documentation on Enabling Remote HTTPS Access to FortiClient EMS
Marta
2 months agoGeraldo
11 days agoBoris
26 days agoShawana
1 months agoToshia
1 months agoElbert
2 months agoSol
2 months agoCarmen
2 months agoMarylin
1 months agoAileen
1 months agoAlishia
2 months agoKenny
1 months agoMabel
1 months agoNickolas
2 months agoMalissa
2 months agoYvette
2 months agoMariann
2 months agoJesusita
3 months agoJacob
3 months ago