Zero Trust Application Access
ZTNA controls and real-time endpoint posture checks before application access.
Feature detailsProduct downloads
FortiClient
Endpoint protection and secure remote access that integrates with the Fortinet Security Fabric and can be centrally managed by FortiClient EMS.
Choose ZTNA, EPP/APT, Standalone, or VPN-only based on the protection level you need.
Overview
What is FortiClient?
FortiClient comes in several levels of capabilities, with increasing levels of protection. It integrates with many key components of the Fortinet Security Fabric and is centrally managed by the Endpoint Management Server (EMS).
Core use includes zero trust application access, VPN with continuous assessment, vulnerability agent and remediation, web and video filtering, and endpoint malware protection depending on edition.
Editions on this site mirror the product download lineup: ZTNA Edition, EPP/APT Edition, FortiClient EMS, FortiClient Standalone Edition, and FortiClient VPN-only.
See Download for platform packages and Trust & Security for lawful use guidance.
Feature preview
Key features in FortiClient
Capabilities highlighted across ZTNA and EPP editions. Full detail is on the features page.
Enhanced VPN
VPN with continuous assessment for remote workers connecting to corporate resources.
Feature details
AI-powered malware protection
EPP/APT adds AI-powered AV, anti-ransomware, anti-exploit, and sandbox integration.
Feature detailsWho uses it
Real use cases
Remote workforce
SSL or IPsec style remote access with posture checks so unmanaged risk is reduced before users reach applications.
Administrators
Central management via EMS for provision, patch, quarantine, dynamic categorization, and real-time endpoint visibility.
Small-scale deployments
Standalone Edition for environments that need supported VPN with MFA and do not require EMS.
Editions
How FortiClient editions compare
Product-class differences across the download lineup.
| Topic | ZTNA Edition | EPP/APT Edition | VPN-only |
|---|---|---|---|
| Zero trust access | Included | Included | Not the focus |
| Malware stack | Core endpoint posture | AI AV, anti-ransomware, sandbox | Upgrade for enterprise tiers |
| EMS management | Central management via EMS | Central management via EMS | Limited compared to enterprise tiers |
| Best for | Zero trust + VPN posture | Full endpoint protection | Basic remote access |
Transparency
Trust and transparency
Official package hygiene
Verify hashes and signatures when published. Prefer administrator-approved builds in managed environments.
Authorized use only
Use FortiClient only on networks you are allowed to access. Policy details are on Trust & Security.