Fortinet FortiClient PC

Overview:

FortiClient is a software product that provides endpoint security for desktops, laptops and mobile devices. FortiClient offers the full range of Fortinet threat protection for PCs and laptops, even when being used on insecure public networks. By itself FortiClient provides a suite of protection products including antivirus/antispyware, a personal firewall, web content filter and antispam - each with separate modular installs. FortiGate users leverage FortiClient to facilitate VPN (IPSec and SSL) for remote users, enhance WAN optimization to accelerate performance, and extend endpoint control. Automatic updates from the FortiGuard subscription service or a FortiManager appliance ensure protection against the latest threats. Centralized management of FortiClient by a FortiManager appliance provides ease of implementation and management for large deployments.

Personal computer (PC) desktop and laptop devices have empowered today’s business users with the capability to access enterprise applications and mission critical data both in the office and on the road. While expanding productivity, remote access to the secure network perimeter increases security risk. Unfortunately, all devices are exposed to blended threats such as viruses, trojans, worms, spyware, keyloggers, botnets, spam and Internet attack. While utilizing network security architectures that isolate segments from one another can mitigate infection or breach, PCs within the same subnet can still potentially infect one another.

Users may inadvertently circumvent policy by bringing in portable storage devices, failing to keep antivirus signatures up-to-date, or even disabling personal firewall protection. Users accessing inappropriate and dangerous web content jeopardize device integrity, negatively impact productivity and create security and legal exposure. While point product security technology, such as antivirus agents, are available to protect devices from certain threats, such methods fall short from comprehensively protecting against blended threats and do not enforce content access guidelines.

FortiClient offers the full range of Fortinet threat protection to PCs and laptops, even when being used on insecure public networks. This comprehensive, modular protection suite secures desktops against viruses, trojans, worms and more. The FortiClient product is a client-based software solution designed to be used in connection with our FortiGate appliances to provide security features like Endpoint Control and WAN Optimization for enterprise computers. The feature set includes VPN (IPSec and SSL), antivirus/antispyware, personal firewall, Web filtering, and antispam – each with separate modular installs to completely avoid any potential conflicts with other security software. Powered by FortiGuard security services, FortiClient has access to constantly-updated protection on a real-time basis against current and emerging threats.

FortiClient PC Benefits:

• Extends Fortinet's comprehensive protection against viruses, spyware, keyloggers, trojans, adware and greyware to laptops and desktops.
• SSL VPN and IPSec VPN support gives mobile laptops and desktops secure access to enterprise applications from remote locations; WAN optimization speeds those remote connections.
• A powerful personal firewall monitors network traffic, application access, intrusion detection and enforces your firewall security policies accordingly
• A component of endpoint control called application detection helps FortiGate administrators deny or monitor network access for endpoints if they run applications against security policy.
• Advanced antispam protection seamlessly integrates with personal computers to protect user productivity on the road and in the home office.
• Web Content Filtering provides real-time web content access enforcement to ensure protection from known malware locations as well as compliance with organizational and educational guidelines.
• FortiManager and FortiAnalyzer centralized management and analysis reduces management burden and operational costs.
• FortiManager enforcement of security policies provides organization-wide security coverage.
• Available configuration lock-down with password override via FortiManager for improved administrative control.
• Bulk installs via installer scripts expedites deployments.
• Local antivirus/antispyware, antispam, and Web filtering signature updates from FortiManager for maximum update speed and protection.
• Cusomizable scheduling ensures updates occur when convenient.
• Available in an enterprise bundle for simplified purchasing.

FortiClient PC Features:

• Extends Fortinet's comprehensive protection against viruses, spyware, keyloggers, trojans, worms, botnets, rootkits, adware, spam, phishing and greyware to PCs and laptops.
• Supports Windows 2000 on 32-bit, and both 32-bit and 64-bit versions of Windows XP, Windows Server 2003, Windows Server 2008, Windows Vista, and Windows 7
• Endpoint control and management
• IPSec VPN and SSL VPN clients
• Personal firewall
• Antivirus/antispyware
• Antispam protection
• Web content filtering
• WAN acceleration
• Application detection
• FortiGate, FortiManager and FortiAnalyzer support
• All inspection technologies supported by FortiGuard Subscription Service

Features and Benefits:

Key Solution Features and Benefits: Endpoint Control Ties into your FortiGate appliance to monitor and enforce endpoint security policy at the network fi rewall, including FortiClient version enforcement, ensuring signatures are up-to-date and personal fi rewall is enabled. Application Detection Extends Endpoint Control to allow admins to detect if endpoints run applications against security policy and automates denial of network access. Endpoint Management Ties into your FortiManager appliance to discover, deploy, update and monitor clients on the network. Ties into your FortiAnalyzer appliance for advanced reporting that leverages FortiClient logs. Secure IPSec VPN Client Empowers mobile laptops and remote desktops with the capability to access enterprise applications securely with DES / 3DES encryption. SSL VPN Tunnel Client Connects securely from anywhere for remote access to web applications behind the fi rewall, protecting confi dential communications. WAN Optimization Speeds services like VPN for remote PC connections over the WAN. Antivirus & Antispyware Provides comprehensive protection against viruses, spyware, keyloggers, Trojans, adware and grayware on the client, with updates by FortiGuard. Powerful Personal Firewall Monitors network traffi c and enforces the appropriate application access control in your security policies. Web Filtering Provides real-time web content access enforcement to ensure compliance. Advanced Antispam Built in antispam that incorporates into MS Outlook to reduce unsolicited emails, email-borne viruses and phishing attempts.

Blended Threats and Compliance Requirements As Internet attack sophistication increases with blended threats, an endpoint security solution that reflects that sophistication makes sense. An integrated protection suite including antispam, Web filtering, antivirus and firewall provides advanced protection against multi-vector attacks that may include email, Web and trojans that attempt to open network connections through a backdoor. With breach incidents affecting the bottom line, government and industry regulators are looking at endpoint security. Payment Card Industry (PCI) requirement 1.4 specifies installation of personal firewall software on mobile and employee-owned computers. HIPAA healthcare EPHI safeguards address protection from malicious software.

Centralized Policy Management

Administrators maintain complete control of the network security infrastructure with a FortiManager appliance. With a complete FCAPS (Faults, Configuration, Accounting, Performance and Security) toolset, FortiManager appliances assist in environments where security, availability and guaranteed performance are mandated.

Deployment Scalability

FortiClient deployments can scale to an unlimited number of devices and receive security subscription updates from the FortiGuard update service or from the FortiManager system.

Low Total Cost of Ownership

Unlike point product agents that provide a single security feature, FortiClient is a true unified security agent that bundles all the necessary capabilities into a single low cost and easy to manage application.

Deployment Scenarios:

Fortinet Security Framework

FortiClient plays an important role in completing most any FortiGate installation. This advanced endpoint protection solution helps close potential security gaps in network architecture, strengthening your security posture by adding an essential layer of protection to PCs and laptops connecting from the LAN or from offsite remote locations. FortiClient provides integration with FortiGate, FortiManager and FortiAnalyzer.

Enhances FortiGate Endpoint Control

FortiGate users benefit from endpoint control, enforcing a policy based approach to FortiClient use.

• Endpoint Control with Application Detection
• VPN (IPSec and SSL)
• WAN Optimization

Eases Deployment with FortiManager

FortiManager users benefit from streamlined FortiClient deployment and centralized management.

• Bulk Deployments of FortiClient Updates
• Auto Discovery of New ForitClients
• Set Management Events and Alerts

Integrates with FortiAnalyzer Reporting

FortiAnalyzer users benefit from FortiClient log capture for integrated endpoint reporting and analysis.

• Endpoint Security Reports
• Automate Report Scheduling
• Vulnerability Analysis

FortiClient Securing Personal and Mobile Computing:

Application Protection

Application hacker tool kits utilize single or blended application malware techniques to compromise a devices operating system and associated applications. FortiClient application multi-layered protection thwarts viruses, spyware, adware, keylogger, dialer and grayware techniques used by cyber criminals.

Network Protection

\

Network reconnaissance, sniffing of clear text traffic and zero day network worms attempt to comprise devices. FortiClient multi-layered Personal Firewall and IPsec VPN capabilities thwart various network techniques used by cyber criminals.

Content Policy Protection & Enforcement

Inappropriate email spam content typically harbors an array of malware intended to negatively impact productivity, while unsanctioned Web content access violates corporate guidelines. FortiClient antispam and Web content filtering features protect against unwanted email content and restricts unapproved web content access.

Product Comparison:

FortiClient Editions

Fortinet offers FortiClient in two editions: a standard edition for small business and consumers, and a premium edition for mid-sized enterprises and other large organizations. Both editions can be used either as a stand-alone product, or in combination with FortiGate and other Fortinet products. The premium edition includes antispam, enables central management with FortiManager, and comes with Enhanced Support.

FortiClient Specifications:
Comparison	FortiClient Standard Edition	FortiClient Premium Edition
Security Features:
Antivirus/Antispyware
Personal Firewall
VPN (SSL and IPSec)
Web Content Filter
FortiGuard updates
Endpoint Control w/ Application Detection*
WAN Optimization*
Antispam
Extended Signature Database Updates
Logging
Central Management**
Enhanced Support

* Required FortiGate
** Required FortiManager

FortiClient Specifications:
Supported Platforms	FortiClient PC	FortiClient Mobile	FortiClient Mobile
	Windows XP, Windows Server 2003 Windows 2000, Windows Vista	Symbian S60 7/8/9	Windows Mobile 2003, 2003SE, 5.0, 6.0
Security Features:
Antivirus
Personal Firewall
Intrusion Protection System (IPS)
Address Book Protection
IPSEC VPN
Email Antispam
Web Content Filtering
SMS Antispam
SMS Filtering	N/A
Phone Security	N/A
Call Filter	N/A

Technical Specifications:

To install FortiClient you need:

• Pentium processor or equivalent

Compatible operating system and minimum RAM:

• Microsoft Windows 2000: 128 MB
• Microsoft Windows XP 32-bit and 64-bit: 256 MB
• Microsoft Windows Server 2003 32-bit and 64-bit: 384 MB
• Microsoft Windows Server 2008 32-bit and 64-bit: 512 MB
• Microsoft Windows Vista 32-bit and 64-bit: 512 MB
• Microsoft Windows 7 32-bit and 64-bit: 512 MB

Compatible email application for the AntiSpam feature:

• Microsoft Outlook 2000 or later
• Microsoft Outlook Express 2000 or later

Compatible email application for the AntiLeak feature:

• Microsoft Outlook 2000 or later

• 100 MB hard disk space
• Native Microsoft TCP/IP communications protocol
• Native Microsoft PPP dialer for dial-up connections Ethernet connection

Features:

Services & Support:

FortiGuard Subscription Services

Includes:

• Automatic updates from over 50 redundant high-speed database servers around the globe.
• Complete Wildlist virus protection for over 30,000 active viruses from FortiGuard’s active database.
• Real-time signature updates for protection against over 5,100 threats.
• 77 rated Web categories for more accurate Web content filtering.
• Web filtering for more than 47 million URLs with more than 70 languages supported.

FortiCare Support Services

Includes:

• 8x5 Enhance Support (Optional)
• Premium Support (Optional)
• 24x7 Comprehensive Support (Optional)
• Professional Services (Optional)
• 90-Day Limited Software Warranty

Documentation:

Download the Fortinet FortiClient Datasheet (PDF).