Fortinet FortiClient EPP/APT

Everything in the ZTNA edition plus endpoint protection: AI-powered next-generation antivirus, cloud sandbox, automated quarantine, application firewall and USB control.

The ZTNA edition plus endpoint protection

The EPP/APT edition includes every feature of the ZTNA edition and adds endpoint protection on top. Anti-malware uses the FortiGuard Content Pattern Recognition Language together with machine learning and AI; the pattern-based CPRL is effective at detecting and blocking polymorphic malware, and it also blocks attack channels and malicious websites.

Sandboxing and containment

FortiClient integrates natively with FortiSandbox, submitting files automatically for real-time analysis and synchronising the results back to EMS, where an administrator can see the behaviour of a submitted object as a full process tree. When a security event fires, automated endpoint quarantine applies a policy-based response — isolating a suspicious or compromised endpoint to contain the incident before it spreads.

Controlling what runs and what connects

The application firewall monitors, allows or blocks application traffic by category, using the same categories as FortiGate so control is consistent on and off the network, and drawing on FortiGuard anti-botnet, IPS and application control intelligence. Application inventory gives visibility of installed software, which is as much a hygiene tool as a licensing one: unnecessary or outdated software is an avoidable part of the attack surface. USB device control prevents unauthorised devices from reaching the host.