FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
mforbes
Staff
Staff
Article Id 190633
Description
This article explains how to disable FortiClient EMS default method of probing device availability using ICMP.

Scope
All FortiClient EMS versions
Solution
ICMP is the default method FortiClient EMS uses to probe a device via it's name. In network environments where ICMP is disabled, the alternative method is to query the DNS Server directly.  This guide shows how to disable ICMP probing.

On Windows FortiClient EMS server:

1. In Windows Explorer, navigate to C:\Program Files (x86)\Fortinet\FortiClientEMS
- Disable 'Hide extensions for known file types' under the Folder Options
2. In Notepad, edit the file 'FcmDeploy.exe.conf' and
- Change PING_PROBE_ENABLED = 1 to PING_PROBE_ENABLED = 0
3. Save
4. Open services.msc from Start Menu
5. Re-start the 'FortiClient Enterprise Management Server Deployment Service' service

Syntax in C:\Program Files (x86)\Fortinet\FortiClientEMS\FcmDeploy.exe.conf
------------------------------------------------------------------------------------------------------------------------------------
; If set to 0 then only DNS queries will be used to determine if a device is online
PING_PROBE_ENABLED = 1

Contributors