EMS
Import your endpoint inventory and security posture from FortiClient EMS (Fortinet)
The EMS (Fortinet FortiClient EMS — Endpoint Management Server) connector allows you to import the inventory of FortiClient-managed endpoints via CSV export. This is a file-based import connector, not an API integration.
Objective
The EMS connector allows you to import the following information:
- Endpoint inventory (hardware, operating system, network information)
- FortiClient security posture (antivirus, firewall, VPN, web filter, vulnerability scan, etc.)
- Endpoint policies assigned to endpoints
- FortiClient agent status and version
Prerequisites
- Access to the FortiClient EMS console with administrator rights
- An active FortiClient EMS instance managing your endpoints
Important Note
This connector works via CSV file export. Although FortiClient EMS offers a REST API, the OverView connector currently uses CSV-based import. You must export endpoint information from the FortiClient EMS console as a CSV file, then import it into OverView.
Information to provide in OverView
| Field | Description |
|---|---|
| Base URL | https://ems.example.com |
| Username | EMS administrator username |
| Password | EMS administrator password |
Parameters
These parameters are optional. Leave them at their default value unless you have a specific reason to change them.
| Parameter | Description | Default |
|---|---|---|
| Collect software inventory | Collect installed software per endpoint | Enabled |
| Collect Zero Trust tags | Collect Zero Trust tags and their endpoint assignments | Enabled |
| Collect vulnerabilities | Collect vulnerabilities detected on endpoints | Enabled |
| Verify SSL | Verify the SSL certificate when connecting to the API | Enabled |
Procedure
Export the endpoint inventory from FortiClient EMS
- Log in to the FortiClient EMS console with administrator rights.
- Go to Endpoints > All Endpoints.
- Select the endpoint group to export (or All Groups to export everything).
- Click Export CSV in the top right corner.
- In the confirmation dialog, click Export.
- A .zip file is downloaded: unzip it to retrieve the .csv file containing the endpoints.
Tip: you can also export events from Endpoints > All Events using the Export button (CSV or JSON format).
Import into OverView
- In OverView, go to Data Sources Settings > Sources.
- Select EMS and click Configure.
- Choose the CSV Import mode.
- Upload your exported (unzipped) CSV file.
- Click Save Configuration.
Synchronization frequency
Since EMS uses file-based import, synchronization must be done manually:
- Export the CSV regularly from the FortiClient EMS console
- Re-import updated CSV files into OverView as needed
- Consider automating exports via scripts or the FortiClient EMS API for regular updates
Alternative: file import through DropPoint
The API access described above is the recommended method for this connector. Where it is not available (a segregated network, a version or licence without API, an export you already produce), OverView accepts file exports, to be uploaded to the bucket dedicated to Fortinet Endpoint Management Server (EMS).
Bucket : s3://fortiems/
Example : s3://fortiems/export.csv
The procedure is described in the OverView DropPoint guide: generating credentials, configuring the client, then sending files from the OverView web interface, the AWS CLI or an SDK. Its examples come pre-filled with this bucket when you follow this link.
Official Documentation
For more information, refer to the Fortinet “Exporting endpoint information” documentation.