Fortinet FortiClient VPN/ZTNA with Forensics, 2000 Endpoints Subscription, 3-Year (FC3-10-EMS04-537-01-36)

A 3-year subscription is the most common enterprise procurement cycle for endpoint security software and aligns well with typical EMS server refresh schedules. This term gives 2,000 endpoints continuous FortiClient VPN/ZTNA and FortiGuard Forensics coverage across three fiscal years, reducing the administrative overhead of annual renewals while keeping the licensing commitment within a standard planning horizon.

What this subscription covers

FortiClient EMS04-537 bundles a VPN/ZTNA agent and a FortiGuard Forensics subscription into one license. The ZTNA component applies identity- and device-posture checks on each managed endpoint, replacing perimeter-only access with per-session verification. All 2,000 endpoints covered by this subscription benefit from these controls simultaneously. The FortiGuard Forensics service adds IOC matching, behavioral threat indicators, and curated threat intelligence feeds, which appear directly inside the EMS console during incident investigations. Both components activate under a single subscription key.

Seat bands and minimum order

Fortinet sells FortiClient subscriptions in four endpoint bands. This subscription is band FC3, covering up to 2,000 endpoints. The table on this page shows all available bands for this service code. Each band is a fixed license unit; you cannot purchase a partial seat count within a band. Organizations managing fewer than 2,000 endpoints should evaluate band FC2 (500 endpoints) to avoid over-licensing, while teams above 2,000 endpoints should look at band FC4 (10,000 endpoints).

How FortiClient is deployed

FortiClient is managed through an instance of FortiClient EMS (Enterprise Management Server) that your team installs and operates on-premise. EMS provides centralized endpoint enrollment, policy assignment, compliance rule enforcement, software distribution to managed devices, and telemetry collection. All configuration and endpoint telemetry stays within your own infrastructure. This on-premise model suits organizations with strict data-residency requirements, regulatory mandates, or internal network policies that prevent endpoint data from leaving a controlled environment.

Who it fits

This subscription fits large enterprise security teams that need to protect and investigate 2,000 managed endpoints without using a cloud-hosted EMS service. Organizations already running FortiClient EMS on their own servers can activate this subscription directly without changes to their existing management infrastructure. Security operations teams gain the most from the FortiGuard Forensics component: IOC enrichment and behavioral threat context are available inside EMS during incident response, reducing the time needed to assess the scope and origin of a compromise.

Buying from DataCenter360.ca

DataCenter360.ca is a Fortinet Select Partner. FC3-10-EMS04-537-01-36 is available with electronic license delivery worldwide. At three years, this is the most frequently chosen term for FortiClient FC3-band subscriptions and aligns with the typical EMS deployment lifecycle. Add to cart, or contact us to confirm the right term for your next renewal cycle.

Frequently asked questions