Fortinet FortiClient: endpoint protection, ZTNA & VPN agent

FortiClient is Fortinet's Unified Agent — a single lightweight client that delivers secure remote access (Universal ZTNA and SSL/IPsec VPN), endpoint protection (NextGen anti-malware, anti-exploit, ransomware rollback), vulnerability scanning, web filtering and CASB. It is centrally managed by FortiClient EMS and integrates with the Fortinet Security Fabric, FortiSASE, FortiNAC and FortiPAM.

VPN/ZTNA provides secure access (ZTNA, VPN, MFA, web filter, Fabric telemetry). EPP/ATP adds full endpoint protection: AI-powered NGAV, anti-exploit, ransomware rollback, sandbox and application firewall — the recommended edition for most organisations. Managed FortiClient delivers the EPP/ATP feature set as a Fortinet-run managed service. Chromebook is a ChromeOS-optimised edition with filtering, telemetry and SSL VPN.

Both. Device-based (endpoint) subscriptions are sold in packs of 25, 500, 2,000 or 10,000 endpoints. FortiTrust user-based licensing is sold per user, where one user can run FortiClient on up to three devices — convenient for people with a laptop, desktop and phone. FortiFlex is also available for MSSPs.

The Endpoint Management System (EMS) is the console that deploys, provisions and monitors your FortiClient endpoints. It is included with every subscription. Choose cloud-hosted EMS (FortiClient Cloud, hosted by FortiCloud — nothing to install) or on-premises EMS, which you run yourself for air-gapped or tightly regulated networks.

No. FortiClient EMS manages endpoints independently, and endpoint protection, VPN and ZTNA work without a FortiGate. That said, pairing FortiClient with FortiGate unlocks the best of the Security Fabric — endpoint telemetry, dynamic access control, endpoint quarantine and automated response — and Universal ZTNA uses FortiOS as the ZTNA application gateway.

Fortinet offers a free FortiClient VPN-only client for basic remote connectivity, but it has no central management, endpoint protection or support. The licensed editions on this page add EMS management, ZTNA, endpoint security and FortiCare Premium 24x7 support — what you need for a managed, business-grade deployment.

FortiClient is software, so there is nothing to ship. Licenses are delivered electronically worldwide as an Authorized Fortinet Select Partner, usually within hours of purchase. We can also help register the entitlement and stand up your EMS.