SSL-VPN
Connect through a browser-style tunnel when IPsec is not the path.
Capabilities
FortiClient features
Notes on VPN, endpoint scan, and EMS policy. Availability can depend on build and license.
Remote access
IPsec
Use a site-style tunnel when the gateway asks for IPsec.
Always-on options
Keep the tunnel up after sign-in when policy requires it.
Endpoint scan
Antivirus
Watch downloads and running files. Quarantine items the engine flags.
Web filter
Block risky categories when EMS or FortiGate pushes the list.
EMS and FortiGate
Enroll the agent to a gateway you trust. Keep only the profile your admin issued.
EMS guidance