1. Pick the right package
Match Windows, macOS, Linux, iOS, or Android and the edition you need from the download page.
Help
FortiClient troubleshooting and guides
Step-by-step checks for install problems, VPN failures, posture blocks, and scanner alerts.
Installation
2. Verify the file
Compare SHA-256 when available. Check the digital signature publisher before elevating privileges.
3. Complete setup
Allow required services when prompted. Reboot if requested, then open FortiClient and add your VPN or EMS configuration.
Common VPN problems
Cannot reach the gateway
Confirm hostname, port, and that outbound VPN ports are allowed. Test another network if a captive portal is present.
Credentials rejected
Verify username format, MFA step, and password status with your identity provider.
Connected but no apps
Split tunnel or firewall policy may limit destinations. Confirm which hosts should be reachable after connect.
Disconnects on sleep
Resume the laptop and reconnect. Some fleets enable auto-connect after wake.
Posture and compliance blocks
If the client connects but access stays limited, real-time endpoint posture checks may have failed. Typical fixes include enabling local antivirus, installing OS updates, or completing EMS registration as directed by IT.
See ZTNA features for what posture checks are meant to do.
Best practices
- Keep FortiClient on the version your security team supports.
- Do not mix unofficial VPN profiles with production gateways.
- Lock the workstation when you step away while a tunnel is up.
- Use MFA when the gateway requires it. Do not share tokens.
- Report unexpected certificate warnings instead of ignoring them.
Antivirus warnings explained
Why flags happen
Security clients install drivers, capture traffic, and change routing. Heuristic engines may label unfamiliar builds as risky.
What to do
Hash-check the installer, confirm the publisher signature, restore only matching files, and keep the scanner enabled afterward. See download antivirus notes.