FortiClient Endpoint Management Server (EMS)
FortiClient EMS helps centrally manage, monitor, provision, patch, quarantine, dynamically categorize and provide deep real-time endpoint visibility. Licensed EMS trials are handled through your Fortinet entitlement process, not through forms on this site.
FortiClient Standalone Edition
FortiClient Standalone is an entry-level commercial tier designed for small-scale deployments that do not require centralized Endpoint Management Server (EMS). It provides essential remote access VPN with MFA support and FortiIdentity Cloud Basic subscription, alongside technical support channels. The standalone FortiClient is ideal for small businesses or free VPN users looking for a low cost officially supported FortiClient.
FortiClient VPN-only
Upgrade to one of the Enterprise tiers for Support, central management, zero trust posture assessment, and more.
Latest version information
Release line
FortiClient 7.4 is the version family presented on this download experience. Install the build that matches your platform and the edition your organization licenses.
What the installer contains
A desktop or mobile client package for the selected edition. It does not include gateway passwords. It does not create a membership on this website.
Source transparency
FortiClient is commercial endpoint software. Prefer packages that match your licensed Fortinet channels or internal software library mirrors of those packages. This site describes editions and install hygiene. It does not claim a different license than the product uses.
SHA hashes and signatures
What a hash is for
A SHA-256 digest confirms the file you saved matches the published package. If one byte changes, the digest changes.
What a signature is for
A signature shows which publisher produced the package. If the signer name is unexpected, do not run the file.
Compare the published digest after download. If a digest is not listed yet, wait before treating the file as verified.
Antivirus false-positive clarification
VPN and endpoint clients may be flagged by heuristic engines because they install services and change network settings. A heuristic alert is not the same as a confirmed infection.
- Check the file hash before escalating a detection.
- Read generic labels such as heuristic or PUA carefully.
- Do not disable your scanner permanently. Restore only after the hash matches.
- If the hash does not match, delete the file and obtain a fresh package.
More steps: guides page.
Security and integrity
Local privileged install
Treat FortiClient like any security agent that can modify system networking.
Managed builds
Corporate images often include EMS registration. Follow IT instructions for those fleets.
No site membership
This site does not collect credentials. Gateway identity stays in the client or your identity provider.