Fortinet FortiClient VPN/ZTNA Agent Subscription, 3-Year (FC1-10-EMS04-428-01-36)

A 3-year term aligns FortiClient VPN and ZTNA coverage with the most common IT infrastructure refresh cycle, reducing renewal events while providing consistent protection across the subscription period. FC1-10-EMS04-428-01-36 covers up to 25 endpoints for thirty-six months, a practical fit for organizations that have standardized on on-premise EMS and want uninterrupted agent coverage through a full hardware generation.

What this subscription covers

FortiClient delivers SSL-VPN remote access and Zero Trust Network Access (ZTNA) enforcement through a single agent installed on each enrolled device. The VPN/ZTNA Agent Subscription (svc code 428) activates both capabilities. While the subscription is active, the agent authenticates users, applies ZTNA policy tags based on device posture, and routes traffic through the Fortinet Security Fabric. This is a software-only license with no hardware component, delivered electronically to customers anywhere in the world.

Seat bands and minimum order

This listing covers the FC1 seat band, which authorizes the VPN/ZTNA agent on up to 25 endpoints. FortiClient subscriptions are available in four seat bands. Choose the band that fits your current endpoint count; you can move to a higher band at renewal.

How FortiClient is deployed

This subscription pairs with an on-premise FortiClient EMS (Enterprise Management Server) that the customer hosts and administers on their own infrastructure. EMS is the central management authority: it distributes agent policy, handles certificate provisioning, evaluates device posture, and assigns ZTNA tags that control which network resources an endpoint can reach. The FortiClient agent is installed on each of the 25 covered devices and checks in with the on-premise EMS server to receive policy updates, posture assessments, and tunnel configuration.

Who it fits

The FC1 band (25 endpoints) suits small businesses, dedicated branch offices, and IT teams managing a fixed group of remote workers or specialized workstations. Customers with strict data-sovereignty, air-gap, or internal compliance requirements benefit from the on-premise EMS model, which keeps all management infrastructure within the organization’s own facilities rather than delegating it to an external cloud service. If endpoint counts are expected to grow significantly, the FC2, FC3, or FC4 bands offer room to scale.

Buying from DataCenter360.ca

DataCenter360.ca is an authorized Fortinet Select Partner. FC1-10-EMS04-428-01-36 is in stock and available for electronic delivery worldwide. At three years, this subscription spans a typical device refresh cycle, so FortiClient licensing and endpoint hardware renewal can align at the same planning event. Contact us if you need pricing for other seat bands or term lengths alongside this order.

Frequently asked questions