Fortinet FortiClient PC

Overview:

FortiClient is a software product that provides endpoint security for desktops, laptops and mobile devices. FortiClient offers the full range of Fortinet threat protection for PCs and laptops, even when being used on insecure public networks. By itself FortiClient provides a suite of protection products including antivirus/antispyware, a personal firewall, web content filter and antispam - each with separate modular installs. FortiGate users leverage FortiClient to facilitate VPN (IPSec and SSL) for remote users, enhance WAN optimization to accelerate performance, and extend endpoint control. Automatic updates from the FortiGuard subscription service or a FortiManager appliance ensure protection against the latest threats. Centralized management of FortiClient by a FortiManager appliance provides ease of implementation and management for large deployments.

Personal computer (PC) desktop and laptop devices have empowered today’s business users with the capability to access enterprise applications and mission critical data both in the office and on the road. While expanding productivity, remote access to the secure network perimeter increases security risk. Unfortunately, all devices are exposed to blended threats such as viruses, trojans, worms, spyware, keyloggers, botnets, spam and Internet attack. While utilizing network security architectures that isolate segments from one another can mitigate infection or breach, PCs within the same subnet can still potentially infect one another.

Users may inadvertently circumvent policy by bringing in portable storage devices, failing to keep antivirus signatures up-to-date, or even disabling personal firewall protection. Users accessing inappropriate and dangerous web content jeopardize device integrity, negatively impact productivity and create security and legal exposure. While point product security technology, such as antivirus agents, are available to protect devices from certain threats, such methods fall short from comprehensively protecting against blended threats and do not enforce content access guidelines.

FortiClient offers the full range of Fortinet threat protection to PCs and laptops, even when being used on insecure public networks. This comprehensive, modular protection suite secures desktops against viruses, trojans, worms and more. The FortiClient product is a client-based software solution designed to be used in connection with our FortiGate appliances to provide security features like Endpoint Control and WAN Optimization for enterprise computers. The feature set includes VPN (IPSec and SSL), antivirus/antispyware, personal firewall, Web filtering, and antispam – each with separate modular installs to completely avoid any potential conflicts with other security software. Powered by FortiGuard security services, FortiClient has access to constantly-updated protection on a real-time basis against current and emerging threats.

FortiClient Features & Benefits:

• Enables you to deploy business practices requiring secure remote access connectivity for your distributed and mobile workforce, contractors and partners
• No ‘per-seat’ licensing for simplified licensing and lower cost
• Co-exists with your existing antimalware solution to provide additional protection without sacrificing your current investment
• Central management using FortiGate® simplifies deployment, configuration, and policy control
• Two-factor authentication helps ensure proper identification of end users
• Enables you to deploy business practices requiring secure remote access connectivity for your distributed and mobile workforce, contractors and partners
• Secures and locks down security policy for remote connectivity, while minimizing stand-alone product complexity and eliminating the high cost of traditional VPN solutions

Endpoint Security — Anytime, Anywhere

FortiClient is an all-in-one security solution designed for organizations seeking comprehensive secure connectivity protection. With FortiClient, remote users can leverage the next generation of secure access from anywhere at anytime. Corporate security policies can be enforced and protected wherever people need to be – including home offices, airports and hotels – anywhere wired or wireless Internet access is available.

The power of FortiClient includes IPSec and SSL VPN for encrypting traffic, two-factor authentication for secure user identification, endpoint control to ensure that noncompliant devices do not access the network, and WAN optimization for bandwidth optimization and decreased download time. FortiClient is designed to meet the requirements of both small and large organizations and is backed by Fortinet's award winning security technology.

In addition, FortiClient offers:

• Straightforward Licensing – ALL FortiClient functionality is included for one low price.
• Simple Deployment and Management
• Custom Configuration – Administrators can predefine configuration and deploy features selectively. Designed for coexistence with other end point client software.

Integration with Gateway Devices

• FortiClient simplifies endpoint security through close integration with the industry-leading FortiGate line of Unified Threat Management devices.

Benefits of Fortinet Infrastructure Integration

• Endpoint access based on installed and/or running application software
• Provides a mix of IPSec and SSL VPN policy configuration which resides internal to the organization and can be pushed out to users
• Custom endpoint characteristic profiles to lock down network access based on organizational compliance policies
• Simplified endpoint licensing based on number of concurrent connections to FortiGate appliance.
• Simple "drag and drop" report creation
• Branded/logo-based management reports
• Reports generated at any time – scheduled or ad hoc

Features and Benefits:

Blended Threats and Compliance Requirements

As Internet attack sophistication increases with blended threats, an endpoint security solution that reflects that sophistication makes sense. An integrated protection suite including antispam, Web filtering, antivirus and firewall provides advanced protection against multi-vector attacks that may include email, Web and trojans that attempt to open network connections through a backdoor. With breach incidents affecting the bottom line, government and industry regulators are looking at endpoint security. Payment Card Industry (PCI) requirement 1.4 specifies installation of personal firewall software on mobile and employee-owned computers. HIPAA healthcare EPHI safeguards address protection from malicious software.

Centralized Policy Management

Administrators maintain complete control of the network security infrastructure with a FortiManager appliance. With a complete FCAPS (Faults, Configuration, Accounting, Performance and Security) toolset, FortiManager appliances assist in environments where security, availability and guaranteed performance are mandated.

Deployment Scalability

FortiClient deployments can scale to an unlimited number of devices and receive security subscription updates from the FortiGuard update service or from the FortiManager system.

Low Total Cost of Ownership

Unlike point product agents that provide a single security feature, FortiClient is a true unified security agent that bundles all the necessary capabilities into a single low cost and easy to manage application.

Deployment Scenarios:

Fortinet Security Framework

FortiClient plays an important role in completing most any FortiGate installation. This advanced endpoint protection solution helps close potential security gaps in network architecture, strengthening your security posture by adding an essential layer of protection to PCs and laptops connecting from the LAN or from offsite remote locations. FortiClient provides integration with FortiGate, FortiManager and FortiAnalyzer.

Enhances FortiGate Endpoint Control

FortiGate users benefit from endpoint control, enforcing a policy based approach to FortiClient use.

• Endpoint Control with Application Detection
• VPN (IPSec and SSL)
• WAN Optimization

Eases Deployment with FortiManager

FortiManager users benefit from streamlined FortiClient deployment and centralized management.

• Bulk Deployments of FortiClient Updates
• Auto Discovery of New ForitClients
• Set Management Events and Alerts

Integrates with FortiAnalyzer Reporting

FortiAnalyzer users benefit from FortiClient log capture for integrated endpoint reporting and analysis.

• Endpoint Security Reports
• Automate Report Scheduling
• Vulnerability Analysis

FortiClient Securing Personal and Mobile Computing:

Application Protection

Application hacker tool kits utilize single or blended application malware techniques to compromise a devices operating system and associated applications. FortiClient application multi-layered protection thwarts viruses, spyware, adware, keylogger, dialer and grayware techniques used by cyber criminals.

Network Protection

\

Network reconnaissance, sniffing of clear text traffic and zero day network worms attempt to comprise devices. FortiClient multi-layered Personal Firewall and IPsec VPN capabilities thwart various network techniques used by cyber criminals.

Content Policy Protection & Enforcement

Inappropriate email spam content typically harbors an array of malware intended to negatively impact productivity, while unsanctioned Web content access violates corporate guidelines. FortiClient antispam and Web content filtering features protect against unwanted email content and restricts unapproved web content access.

Product Comparison:

FortiClient Editions

Fortinet offers FortiClient in two editions: a standard edition for small business and consumers, and a premium edition for mid-sized enterprises and other large organizations. Both editions can be used either as a stand-alone product, or in combination with FortiGate and other Fortinet products. The premium edition includes antispam, enables central management with FortiManager, and comes with Enhanced Support.

Comparison	FortiClient Standard Edition	FortiClient Premium Edition
Security Features:
Antivirus/Antispyware
Personal Firewall
VPN (SSL and IPSec)
Web Content Filter
FortiGuard updates
Endpoint Control w/ Application Detection*
WAN Optimization*
Antispam
Extended Signature Database Updates
Logging
Central Management**
Enhanced Support

* Required FortiGate
** Required FortiManager

FortiClient Specifications:
Supported Platforms	FortiClient PC	FortiClient Mobile	FortiClient Mobile
	Windows XP, Windows Server 2003 Windows 2000, Windows Vista	Symbian S60 7/8/9	Windows Mobile 2003, 2003SE, 5.0, 6.0
Security Features:
Antivirus
Personal Firewall
Intrusion Protection System (IPS)
Address Book Protection
IPSEC VPN
Email Antispam
Web Content Filtering
SMS Antispam
SMS Filtering	N/A
Phone Security	N/A
Call Filter	N/A

Technical Specifications:

Security Features:

Services & Support:

FortiGuard Security Subscription Services

FortiGuard Security Subscription Services deliver dynamic, automated updates for Fortinet products. The Fortinet Global Security Research Team creates these updates to ensure up-to-date protection against sophisticated threats. Subscriptions include antivirus, intrusion prevention, web filtering, antispam, vulnerability and compliance management, application control, and database security services.

FortiCare Support Services

FortiCare Support Services provide global support for all Fortinet products and services. FortiCare support enables your Fortinet products to perform optimally. Support plans start with 8x5 Enhanced Support with "return and replace" hardware replacement or 24x7 Comprehensive Support with advanced replacement. Options include Premium Support, Premium RMA, and Professional Services. All hardware products include a 1-year limited hardware warranty and 90-day limited software warranty.

Documentation:

Download the Fortinet FortiClient Datasheet (PDF).