Fortinet FortiClient VPN/ZTNA

The Zero Trust agent: ZTNA tunnels, SSL and IPsec VPN with MFA, web filtering and vulnerability remediation, managed centrally from EMS or FortiClient Cloud.

Zero trust, from the endpoint

The ZTNA edition is the Zero Trust agent. It supports ZTNA tunnels, single sign-on and device posture check against the FortiOS access proxy, so access is granted on the state of the device and the identity of the user rather than on being inside the network. Split-tunnelling is supported on both ZTNA and VPN tunnels, and single sign-on integrates with FortiAuthenticator for identity and access management.

Managed centrally

FortiClient is deployed and provisioned centrally through EMS or FortiClient Cloud, so administrators can push software and controlled upgrades to thousands of clients at once. Windows AD integration syncs the directory structure into EMS so the same organisational units can be used for endpoint management, and real-time endpoint status reports current activity and security events. Centralised logging simplifies compliance reporting and feeds FortiSIEM or another SIEM.

Posture that drives the firewall

The dynamic Security Fabric connector lets EMS build virtual groups based on endpoint security posture. FortiGate retrieves those groups and uses them in firewall policy for dynamic access control, which automates a large part of compliance enforcement: an endpoint that falls out of policy loses access without an administrator touching the firewall.