Skip to content Skip to navigation Skip to footer

FortiClient 7

Fortinet Fabric Agent for Visibility, Control, and ZTNA

Product Download Zero Trust Access For Dummies
FortiClient 7 banner background banner dots


FortiClient Unifies Endpoint Features

FortiClient is a Fabric Agent that delivers protection, compliance, and secure access in a single, modular lightweight client. A Fabric Agent is a bit of endpoint software that runs on an endpoint, such as a laptop or mobile device, that communicates with the Fortinet Security Fabric to provide information, visibility, and control to that device. It also enables secure, remote connectivity to the Security Fabric.

The FortiClient Fabric Agent can:

  • Report to the Security Fabric on the status of a device, including applications running and firmware version.
  • Enable the device to connect securely to the Security Fabric over either VPN (SSL or IPsec) or ZTNA tunnels, both encrypted. The connection to the Security Fabric can either be a FortiGate Next-generation Firewall or SASE service.
  • Send any suspicious files to a Fabric Sandbox.
  • Enforce application control, USB control, URL filtering, and firmware upgrade policies.
  • Apply CASB controls to users accessing cloud-based applications.
  • Provide malware protection and application firewall service.

FortiClient is offered with several levels of capabilities, with increasing levels of protection. It integrates with many key components of the Fortinet Security Fabric and is centrally managed by the Endpoint Management Server (EMS).

View by:

Features include:

Zero Trust Agent with Multi-factor Authentication (MFA) The Zero Trust Agent supports ZTNA tunnels, single sign-on (SSO), and device posture check to FortiOS access proxy
Central Management via EMS or FortiClient Cloud Centralized FortiClient deployment and provisioning that allows administrators to remotely deploy endpoint software and perform controlled upgrades. Makes deploying FortiClient configuration to thousands of clients an effortless task with the click of a button.

Vulnerability dashboard helps manage an organization’s attack surface. All vulnerable endpoints are easily identified for administrative action.

Windows AD integration helps sync an organization’s AD structure into EMS so the same organization units (OUs) can be used for endpoint management. Realtime Endpoint Status always provides current information on endpoint activity and security events.

Central Logging and Reporting Centralized logging simplifies compliance reporting and security analysis by ForiSIEM or other SIEM product
Dynamic Security Fabric Connector EMS creates virtual groups based on endpoint security posture. These virtual groups are then retrieved by FortiGate and used in firewall policy for dynamic access control. Dynamic groups help automate and simplify compliance for security policies.
Vulnerability Agent and Remediation Vulnerability agent and remediation ensures endpoint hygiene and hardens endpoints to reduce the attack surface. This identifies vulnerable endpoints and prioritizes unpatched OS and software vulnerabilities with flexible patching options including auto-patching.
SSL VPN with MFA Secure Socket Layer (SSL) Virtual Private Network (VPN) with MFA enables an easy-to-use encrypted tunnel that will traverse most any infrastructure.
IPsec VPN with MFA IP Secure (IPSec) VPN with MFA enables an easy-to-use encrypted tunnel that provides the highest VPN throughput.
FortiGuard Web Filtering

Powered by FortiGuard Labs research, the web filtering function monitors all web browser activities to enforce web security and acceptable usage policy with 75+ categories. It works across all supported operating systems and works with Google SafeSearch. The endpoint web filtering profile can be synchronized from FortiGate for consistent policy enforcement. Administrators can set black/white lists, on-/off-net policies, and import FortiGate web filtering policies for consistent enforcement.

FortiClient now supports a web filter plugin that improves detection and enforcement of web filter rules on HTTPS sites with encrypted traffic.

Split-tunneling Supported on ZTNA and VPN tunnels, split-tunneling enables optimized user experience
Single Sign-on (SSO) SSO integrates with FortiAuthenticator identity and access management to provide single sign-on.
ZTNA Edition Features This edition includes all the features in the ZTNA Edition plus the following:
AI-powered Next-Generation Antivirus (NGAV) Anti-malware leverages FortiGuard Content Pattern Recognition Language (CPRL), machine learning, and AI to protect endpoints against malware. The pattern-based CPRL is highly effective in detecting and blocking polymorphic malware. It also blocks attack channels and malicious websites.
FortiClient Cloud Sandbox FortiClient natively integrates with FortiSandbox. FortiClient automatically submits files to the connected FortiSandbox for real-time analysis. Sandbox analysis results are automatically synchronized with EMS. Administrators can see detailed information and behavior activities of submitted objects including graphic visualization of the full process tree.
Automated Endpoint Quarantine When triggered by security events, automated endpoint quarantine automates policy-based response. For example, it can automatically quarantine a suspicious or compromised endpoint to contain incidents and prevent outbreaks.
Application Firewall The application firewall provides the ability to monitor, allow, or block application traffic by categories. It uses the same categories as FortiGate, enabling consistent application traffic control. It leverages FortiGuard anti-botnet, IPS, and application control intelligence and can prevent the use of unwanted applications including proxy apps and HTTPS messaging apps.
Application Inventory

Application inventory provides visibility of installed software. In addition to managing licenses, software inventory can improve security hygiene. When software installed is not required for business purposes, it unnecessarily introduces potential vulnerabilities, and thereby increases the likelihood of compromise.

Administrators can reduce the attack surface by leveraging inventory information to detect and remove unnecessary or outdated applications that are potentially vulnerable.

USB Device Control This capability prevents unauthorized USB devices from accessing the host.

Schools continue to enhance their technologies in the curriculum and the adoption of personal devices such as Chromebooks are increasingly commonplace. School districts are required to be in compliance with Children’s Internet Protection Act (CIPA) and protect students from harmful content while browsing the internet.

Consistent web filtering policy enforcement on and off campus

Powered by FortiGuard Labs research, the web filtering function monitors all web browser activities to enforce web security and acceptable usage policy with 75+ categories. It also supports Google SafeSearch.

  • Supports safe browsing for K-12 on and off campus. No reverse proxy or VPN is required
  • Categorizes more than 43 million rated websites and 2 billion+ web pages
  • Consistent with web filtering policy on FortiGate
  • Works with Google SafeSearch and supports custom denied/approved lists
  • Monitors all web browser activity including HTTPS

Easy to deploy, simple to use

  • Integrates with Google G Suite Admin Console for management
  • Deployment from within G Suite admin console and Google Chrome Web Store. It allows administrators to manage apps and extensions on Chromebooks, making it a scalable process.Enables single sign-on with Google credentials without requiring additional captive portal login.

Flexible detailed logging and reporting

  • Identifies students logged into Chromebooks and apply appropriate policies that are grade-level appropriate.
  • Supports the “cart system” where devices are not specifically assigned to one user.

Read the solution brief

  Windows MAC OS ANDROID IOS Chromebook Linux
Zero Trust Security
Endpoint Telemetry
Compliance Enforcement Using Dynamic Access Control  
Endpoint Audit and Remedication with Vulnerability Scanning      
Remote Logging and Reporting  
IPSec VPN      
ZTNA Remote Access      
Windows AD SSO Agent        
USB Device Control      
Endpoint Security
Cloud-based Threat Detection        
Sandbox (on-prem)      
Sandbox (cloud-based)        
Automated Endpoint Quarantine        
Web Filter  
Application Firewall        
Zero Trust Agent
Zero Trust Network Access (ZTNA)
Central Management using FortiClient Cloud
Central Logging and Reporting
IPsec VPN with MFA*
SSO Mobillity Agent
CASB (Inline and API)
IT Hygience
Vulnerability Agent and Remediation
FortiGuard Web Filtering
USB Device Control  
Endpoint Security (EPP)
FortiSandbox (On Premise or PaaS)  
FortiClient Cloud Sandbox  
AI-powered NGAV  
Automated Endpoint Quarantine  
Ransomware Protection  
Managed FortiClient Service
Endpoint On-boarding    
Initial Provisioning    
Security Fabric Setup/ Integration    
Vulnerability Monitoring    
Endpoint Security Monitoring    
Additional Services
Best Practice Service (BPS) Consultation Account Add-on Account Add-on N/A
Forensic Analysis Service (FAS) Account Add-on Account Add-on Account Add-on
24x7 Support
On-Premise/ Air Gap Option  

View by:

Our Customers Emphasize the Value of FortiClient in Gartner Peer Insights Reviews

FortiClient is more than endpoint protection. It strengthens enterprises overall security by integrating endpoints with network security and delivering continuous visibility and risk assessment of the endpoints. It supports proactive defense with vulnerability scanning, patching, compliance control and secure remote access.

Many enterprise customers realize the power and effectiveness of FortiClient and have provided positive feedback on Gartner Peer Insights.  Read what end users say about our FortiClient Security Fabric Agent.   

Powerful Endpoint Protection For Your Corporate Devices

Senior Consultant IT in the Manufacturing Industry

“This is a solid all-in-one security product that we use to protect our corporate endpoints. The reason for our investment in this product was that we were looking for enhanced security features such as application control and web-filter for our Internet connected endpoints. Since we already had invested a lot in other Fortinet security products, we decided to also implement the FortiClient Endpoint Protection features and that is a decision we do not regret. With FortiClient we got a lot more than just the security features we needed. One of the greatest values was the ease of management and overview of our endpoints. This includes the vulnerability scanner and software inventory that comes with the latest version, which provides us with an overall threat summary of vulnerabilities on our endpoints.”

Best VPN Client, AV and Vulnerability Management Client

Cyber Security Leader in the Manufacturing Industry

“Fortinet is extremely easy to work with and their support is excellent. The integration of FortiClient with the overall Fortinet ecosystem is a large advantage for us.”

Next Generation Endpoint. Lovely Telemetry and Compliance Function

IT Manager in the Healthcare Industry

“FortiClient brings better endpoint visibility and total control. It knows endpoint vulnerability and only grants endpoint that has minimum requirement.”

An Excellent Multifunctional VPN, AntiVirus & Web Filtering Client

Networks & Infrastructure Manager in the Construction Industry

“We deployed FortiClient to replace multiple products from other vendors. It combines multiple functions, VPN, AV, Application Firewall, Web Filtering [additionally, it integrates with] our Security Fabric, Telemetry & Compliance enforcement.”

Fully Featured EPP Which Was Extremely Easy To Roll Out And Manage

IT Services Manager in the Education Industry

"A huge bonus is the compliance feature which will scan all programs installed on the endpoint and report back on whether that particular version of the program has vulnerabilities.”

Integration FortiClient That Supports Our Work Stations

IT Support in the Transportation Industry

“It is a very good product and the best thing is that it is integrated into a solution with both the [endpoint and] firewall, generating greater security of our workstations.”

For more Peer Insight reviews on FortiClient, click here


Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences, and do not represent the views of Gartner or its affiliates.

Effective security and smooth operations are mission-critical for every organization. We fortify our products with best-in-class security services, professional services, and support.

Operational Services

FortiClient Best Practice Service (BPS)

The Best Practices Service is an account-based service that delivers guidance on deployment, upgrades, and operations. Fortinet experts help customers properly operate FortiClient installations. The BPS team will provide advice over the phone or email, but will not log into any customer systems nor directly configure or manage product.

FortiClient Managed Services (MS)

FortiClient Managed services streamline the configuration, deployment, and ongoing monitoring of FortiClient agents managed by FortiClient Cloud. The MS team will log into a customer’s FortiClient Cloud account and can directly configure, observe, and monitor products deployed. MS is a device-based subscription service staffed by Fortinet professional engineers. Our extensive experience with FortiClient deployments effectively enables organizations to hire a team of endpoint specialists.

FortiClient Forensic Analysis Service (FAS)

FortiClient ManageFortiClient Forensic Service provides analysis to help endpoint customers respond to and recover from cyber incidents. For each engagement, forensic analysts from Fortinet’s FortiGuard Labs will assist in the collection, examination, and presentation of digital evidence, including a final, detailed report. FortiClient subscriptions that include Forensic Services entitle the customer to call on these endpoint forensic experts whenever an event happens, offloading internal teams and accelerating investigations by analysts deeply familiar with the tools of endpoint security. Forensic Services is not a per-incident service but rather part of the subscription offering.

FortiGuard Labs Threat Intelligence

FortiGuard Labs delivers timely, global intelligence combined with fast decision-making and response across all critical vectors. This enables near-real time, AI-driven protection across the Fortinet Security Fabric.



FortiCare Technical Support and Services

FortiCare provides 24x7 support options to help keep your Fortinet deployment up and running smoothly. We also have services such as our Premium RMA options with 4-hour replacements, to make sure you’re covered in case of an extreme event.

View by:

Fuse Community

FortiClient Ecosystem

FortiClient provides integration with many leading IT vendors as part of the Fortinet Security Fabric. Below is a list of current FortiClient Alliance Partners:

Securing your endpoints against today’s threats on a myriad of devices can be quite a challenge for a number of reasons. Managing separate endpoint features is complex and time-consuming. Disparate security products don’t share intelligence, resulting in slow threat response. And, lack of IT expertise to effectively administer endpoint security can let threats into your network. FortiClient delivers easy-to-manage, automated, fully customizable endpoint security for a broad set of devices, removing those challenges.



FortiClient EMS integration with the Fortinet Security Fabric Demo
FortiClient EMS Chromebook For Education

FortiClient Use Cases

FortiClient is more than just an advanced endpoint protection solution with a built-in VPN client. It connects the endpoint with the Security Fabric and delivers integrated endpoint and network security. With the modular design, users can deploy FortiClient for some or all of the use cases.  


View by:

Security Fabric Integration

Endpoint Visibility and Compliance Control

FortiClient ensures endpoint visibility and compliance throughout the Security Fabric and integrates endpoint and network security with automation and segmentation. FortiClient shares endpoint telemetry with the Security Fabric, enabling unified endpoint awareness.

In addition, it is also compatible with third-party anti-malware or endpoint detection and response (EDR) solutions.


Secure Remote Access (VPN, ZTNA)

Ensure secure remote access with always-on, SSL/IPsec VPN that supports network segmentation, conditional admission, and integrates with FortiAuthenticator for single sign on, and multi-factor authentication. 

Secure remote access

Traditional VPN

ZTNA Application Access

ZTNA Application Access

Endpoint Hardening

99% of the vulnerabilities exploited continue to be ones known by security and IT at the time of the incident. FortiClient enables vulnerability scanning with automated patching, software inventory, and application firewall to help reduce the attack surface and boost overall security hygiene.

As part of the telemetry shared throughout the Security Fabric, endpoint vulnerability information allows network security operations teams to take additional measures, such as dynamic access control, to help secure the environment.   

FortiClient enables vulnerability scanning with automated patching

The FortiClient vulnerability dashboard delivers detailed information including category, severity, and can pinpoint the affected endpoints.   

Advanced Endpoint Protection

Secure endpoints with machine learning antimalware and behavioral-based anti-exploit.  Sandbox integrations detect advanced threats, customer malware, and script-based, file-less attacks. Application firewall, intrusion prevention system (IPS), botnet protection, and web content filtering provides additional layers of protection.

FortiClient also natively integrates with FortiSandbox. It can block the execution of any never-before seen file and automatically submit them to the sandbox for real-time analysis. Real-time threat intelligence from FortiSandbox is instantly shared across the enterprise to all endpoints.

Advanced endpoint protection

The FortiClient endpoint management console shows detailed analysis from FortiSandbox. 

Features and Benefits

See the product datasheet for more information.


Delivers better remote access and consistent application access policies


Provides telemetry information and leverages integrations to the rest of the Fortinet Security Fabric
Provides web security and content filtering

Software Inventory Management

Enables visibility and license management


Control access to cloud-based applications, including visibility to shadow IT


Detects and isolates compromised endpoints

FortiClient Product Details

FortiClient can be purchased with three levels of capability: Zero Trust Security, Endpoint Security, and Cloud-based Endpoint Security.

  • Zero Trust Security: The ZTNA Edition of FortiClient provides the requirements for a remote worker to connect to the network with a minimum level of control. This edition enables both ZTNA and VPN encrypted tunnels, as well as URL filtering and USB device control. Central management via FortiClient EMS is included.

  • Endpoint Protection: The EPP/APT Edition of FortiClient expands on the capabilities of the ZTNA Edition by adding AI-based next-generation antivirus (NGAV), endpoint quarantine, and application firewall, as well as support for cloud sandbox.

  • Managed Endpoint Security Services: To simplify the initial deployment and offload ongoing monitoring, Fortinet offers Endpoint-focused managed services to remotely assist with set up, deployment, configuration, vulnerability monitoring, and overall endpoint security monitoring.

See the Models & Specs tab for details.

Building a Cybersecurity Workforce

Advanced training for security professionals, technical training for IT professionals, and awareness training for teleworkers.

Learn More

FortiClient News