SSL-VPN and IPsec
Open a tunnel to a FortiGate gateway without leaving the agent.
Feature notesEndpoint downloads
FortiClient
An endpoint security and VPN client for Windows, macOS, and Linux. Connect to a FortiGate, scan threats, and keep remote desks under policy.
Pick Standard, VPN, or Latest based on how you connect.
Overview
What is FortiClient?
FortiClient is a desktop agent used for remote access, antivirus, and web filter. It stays light while reporting status to FortiGate or EMS.
Core use includes SSL-VPN or IPsec tunnels, real-time malware scan, category blocking, and vulnerability checks.
Builds on this desk: Standard, VPN, and Latest. Match the package to your OS.
See Download for platform files and Trust & Security for package hygiene.
Preview
Key moves in FortiClient
Endpoint protection
Scan downloads and running files before they land on the desk.
Feature notes
Web filter
Block risky categories when policy is applied from EMS.
Feature notesWho uses it
Everyday desks
Remote staff
Reach internal apps through a VPN while the endpoint stays scanned.
Security teams
Push one EMS profile and watch compliance on every laptop.
Contract desks
Use the VPN-only build on machines that do not need the full agent.
Builds
How the builds compare
| Topic | Standard | VPN | Latest |
|---|---|---|---|
| Update pace | Tested releases | Tested releases | Newer experiments |
| Install style | Full agent | Tunnel only | Full agent |
| Best for | Daily protection | Remote access only | Trying new bits |
Clarity
Trust on this desk
Package hygiene
Check hashes when posted. Prefer admin-approved copies on shared machines.
Licensed use
Follow the product license. Policy notes sit on Trust & Security.
"VPN came up in seconds after I entered the FortiGate gateway."
Remote analyst
"Endpoint protection stopped a drive-by download before it ran."
Helpdesk lead
"The VPN-only build was enough for contractors on shared PCs."
IT coordinator
"Web filter blocked the risky category I was about to open."
Finance staff
"Latest sat on a lab machine while Standard stayed on my daily laptop."
Student
"EMS pushed the same policy to every remote desk."
Security admin
"VPN came up in seconds after I entered the FortiGate gateway."
Remote analyst
"Endpoint protection stopped a drive-by download before it ran."
Helpdesk lead
"The VPN-only build was enough for contractors on shared PCs."
IT coordinator
"Web filter blocked the risky category I was about to open."
Finance staff
"Latest sat on a lab machine while Standard stayed on my daily laptop."
Student
"EMS pushed the same policy to every remote desk."
Security admin
Quick answers
Brief FAQ
The VPN-only build is commonly used without a paid seat. Full endpoint features follow your Fortinet license.
No. This desk has no membership forms. Use the download buttons when you want a package.
Standard for daily protection, VPN for tunnel-only access, Latest when you want newer bits.
Ready to get FortiClient?
Open the download desk for Standard, VPN, and Latest packages.