FortiPAM Virtual Machines
Privileged Access Management and Secure Remote Access

Fortinet Products

FortiPAM-VM Subscription for one FortiPAM virtual machine appliance seat for 5 to 9 users

FortiPAM-VM 1 Year Subscription for one FortiPAM virtual machine appliance seat for 5 to 9 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC1-10-PAVUL-591-02-12
List Price: ~~$600.00~~
Our Price: $519.48

FortiPAM-VM 3 Year Subscription for one FortiPAM virtual machine appliance seat for 5 to 9 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC1-10-PAVUL-591-02-36
List Price: ~~$1,800.00~~
Our Price: $1,558.44

FortiPAM-VM 5 Year Subscription for one FortiPAM virtual machine appliance seat for 5 to 9 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC1-10-PAVUL-591-02-60
List Price: ~~$3,000.00~~
Our Price: $2,597.40

Click here to jump to more pricing!

Overview:

Privileged Access is defined as access to an account with privileges beyond those of regular accounts, typically in keeping with roles such as IT Managers and System Administrators. Examples of privileged access include Firewall and Network Administrators, Windows Domain and Enterprise administrators.

Importantly Privileged Account attacks remain a high-profile attack vector, and in many instances, detection alone is measured in hundreds of days, with recovery taking significantly longer.

Built on the firm foundations of FortiOS, FortiPAM provides robust privileged account management, session monitoring and management, and strict role-based access control to secure access to sensitive assets and mitigate data breaches.

FortiPAM also supports operational technology (OT) use cases and connectivity standards, offering a variety of connectivity options, ranging from full ZTNA enforcement to Agentless connectivity with no client-side installation requisites.

With capabilities such as account discovery, secure password and certificate storage, password rotation, identity authentication, session monitoring and recording, and reporting, FortiPAM provides security teams with full visibility and control of privileged credential usage.

FortiPAM is incredibly straightforward to deploy and maintain. Whilst FortiPAM is fully capable of running in stand-alone mode, it also offers deep integrations with several Fortinet products.

Highlight Details

Credential Security: AES256 encryption for saved secrets; obfuscated credentials prevent leaks during sessions
Certificate Storage: Secure storage for certificates and keys with comprehensive logging for future deployment
ZTNA Integration: Continuous endpoint validation with FortiClient EMS, ensuring only trusted users and devices gain access
Privileged Monitoring: Records login, keystrokes, and actions with session termination and video playback
Automated Service Account Management: Automatic discovery, import, and rotation of Service Account credentials with policy-driven management
Secure Access with MFA and SSO: Supports SAML, RADIUS, LDAP, and Active Directory integration for seamless and secure authentication workflows
Comprehensive Reporting: Centralized, tamper-resistant audit trails for compliance and enhanced visibility
Fortinet Ecosystem Integrations: Seamlessly integrates with FortiClient EMS, FortiToken, FortiAuthenticator, and FortiSandbox for enhanced security workflows

FortiPAM Privileged Access and Session Management—Key Features:

Scalable, market-proven, enterprise-ready solution. Flexible solution with high availability and redundancy, as well as ‘break-glass’ to help ensure business continuity. Distributed network gateway support enables secret and session management across multiple networks and geographies, and the native REST API enables integration with third-party tools (e.g., Ansible, Terraform) for secret retrieval.

Comprehensive session controls. With built in SSH command and Windows Application filtering in place, FortiPAM administrators can block harmful, or unwanted actions on their connected assets.

Fully secure credentials. When a secret is saved in FortiPAM, that data is encrypted using advanced AES256 encryption. When a FortiPAM session is launched to an asset, the credentials are completely obfuscated from the user. With this approach, regardless of what assets are being connected, credentials can never be captured or leaked by the user.

Zero Trust Network Access (ZTNA). When integrated with FortiClient EMS, FortiPAM performs continuous ZTNA endpoint validation, ensuring connecting user devices are policy compliant before granting access to sensitive systems or data. ZTNA controls offer highly granular, robust, realtime controls over connecting machines, thus ensuring only trusted users and devices are able to connect to targets.

Privileged session monitoring. Provides granular control of user activities by monitoring, recording, and auditing privileged user activity (e.g., login, keystrokes, and mouse events). Authorized admins can restrict privileged user activities with command filtering or SSH Filter Controls. Admins can also monitor and terminate active sessions. Session video recording and playback are available for further analysis.

Built-in DLP and Antivirus capabilities. Powered by FortiGuard Labs, FortiPAM provides built-in DLP and Antivirus capabilities, ensuring comprehensive protection for File Transfer traffic and alerting on data misuse or leakage. Prevents data exfiltration and blocks unwanted data downloads.

Connectivity. FortiPAM supports a broad range of access protocols for connectivity to target assets, including out-ofthe-box and high-profile protocols, such as RDP, SSH, VNC, Telnet, MSSQL, SMB, SCP, HeidiSQL, and others. Further, should a protocol requirement exist which has not been predefined, FortiPAM users are able to design a custom protocol launcher.

Automated service account discovery, and management of privileged accounts and credentials. Automatically discover, import, and rotate Service Account credentials based on policies, mitigating manual, error-prone processes. Admins can define granular policies (e.g., rotation frequency, password complexity) and hierarchical access approval processes, ensuring compliance and security requirements are met.

Certificate storage. In addition to target and secret storage, FortiPAM also securely stores certificates and keys for future deployment and logs all certificate-related activities.

Comprehensive reports. Centralized audit and reporting to meet required compliance mandates. Full tamper-resistant audit trail tracks all user activity and provides enhanced visibility and security.

Secure privileged access with Multifactor Authentication (MFA) and Single Sign-On (SSO). FortiPAM offers extensive support for authentication protocols, including OOTB support for SAML, RADIUS, and LDAP, with Active Directory integration for assigning user roles and permissions. FortiPAM integrates seamlessly with FortiToken Cloud, enabling contextualized user authentication and a streamlined user access experience.

Secure remote user for third-party privileged access. FortiPAM can easily be configured to enable visitor/guest access. With robust OOTB authentication, FortiPAM is the ideal solution to authenticate external, remote employees/ vendors. Adopting a least privileged approach, external visitors may only access the resources explicitly declared by the administrator. In addition, admins can set up an auto-onboarding rule for users in FortiPAM. This process is triggered by the user’s first successful login, during which FortiPAM automatically syncs permissions via LDAP, RADIUS, or SAML based on group membership and user role.

Integrations. FortiPAM supports seamless integration with several Fortinet products; FortiClient EMS integration provides continuous ZTNA endpoint validation to ensure privileged user devices are secured before allowing access to sensitive data. FortiToken and FortiAuthenticator integrations provide orchestrated user authentication and authorization workflows to enable MFA, SSO, passwordless access, and more. Customers can even Integrate with FortiSandbox for file transfer operations for deep inspection and threat analysis.

Features Summary:

User Management

Local User
Remote Authentication: LDAP Server
Remote Authentication: Radius Server
SAML
MFA: FortiToken
MFA: Email Token
MFA: SMS Token
Administrator Role Management
User Group
API User
User Trusted Host
FortiToken Cloud

Secret Folder

Public Folder
Personal Folder
Folder Permission Control
Secret Policy Management

Secret Template and Access

Unix SSH (Password or Key)
Windows Domain Account (LDAPS or Samba)
Template - FortiGate
Template - Cisco Device
Template - Web Account
Template - Machine
Custom Template

Secret

Secret Check-out/Check-in
Renew Secret Check-out
Approval Request
Verify Password
Periodical Password Changer
Password Heartbeat
Video Recording
SSH Filter
Auto Password Delivery on Native Launcher
Cisco Device Auto-Enable on Native Launcher
Associated Secret Launcher
Associated Secret Password Changer
SSH Keyboard Interactive Authentication on Native
Launcher
RDP Security Level
Block RDP Clipboard
AD Target Restriction
Move/Clone a Secret
Secret Permission Control
Favorite Secrets

Launcher

PuTTY (FCT required)
Remote Desktop - Windows (FCT required)
Web Launcher
Web RDP
Web SFTP
Web SMB
Web SSH
Web VNC
WinSCP
VNC Viewer (FCT required)
Tight VNC (FCT required)
Custom Launcher

Secret Request Approval

Approval Profile (up to three Tiers)
Request Review and Approve
Request Notification
Multiple Approvals Requirement
Script

Password Changer

Password Policy
Custom Password Changer

Monitor and Record

User Monitor
Active Sessions Monitor
Session Recording

Log and Audit

Events - System
Events - User
Events - HA
Logs - Secrets
Logs - Video (Record and Replay)

System

HA
Glass Breaking
Maintenance Mode
Automatic Configuration Backup
Max Duration for the Launcher Session
vTPM: KVM
vTPM: VMWare
FortiClient: Custom FCT FortiVRS (video recording daemon) Port
High Availability
Disaster Recovery support

Authentication

Address (Used in AD Target Restriction)
Scheme and Rules

Stability

Long Session
Stress Test (Overload, CPU 70%)

Installation

Upgrade
Installation Doc/ Administration Guide

Security

ZTNA Tag Endpoint Control to target server and/or PAM server
2 Factor Authentication for local PAM users or remote SAML, Radius, LDAP users
Anti-Virus scanning for web-based file transfer (Web SFTP, Web SAMBA) and SCP-based file transfer
Automatic blocking of dangerous commands with SSH filtering profile
User access control based on IP and/or schedule
Secret access request/approval
Secret check-out/check-in protection
Auto password changing after check-in
Scheduled password change
High-strength SSH encryption algorithm
Advanced RDP authentication protocol including CredSSP, TLS
Role-based access control
Policy-based access profile enforcement
Trusted Platform Module to protect user private keys vData Leak Prevention based on file types, size, or watermarks

Secure Remote Access for OT

Clientless Web Launchers
OT-Focued Credential Management
Advanced Approval Workflows
Disaster Recovery Support
Command Filtering

Documentation:

Download the Fortinet FortiPAM Series Datasheet (PDF).

Pricing and product availability subject to change without notice.

Fortinet Products

#FC1-10-PAVUL-591-02-12
List Price: ~~$600.00~~
Our Price: $519.48

#FC1-10-PAVUL-591-02-36
List Price: ~~$1,800.00~~
Our Price: $1,558.44

#FC1-10-PAVUL-591-02-60
List Price: ~~$3,000.00~~
Our Price: $2,597.40

FortiPAM-VM Subscription for one FortiPAM virtual machine appliance seat for 10 to 24 users

FortiPAM-VM 1 Year Subscription for one FortiPAM virtual machine appliance seat for 10 to 24 users. Includes PAM and SRA features, agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC2-10-PAVUL-591-02-12
List Price: ~~$480.00~~
Our Price: $415.58

FortiPAM-VM 3 Year Subscription for one FortiPAM virtual machine appliance seat for 10 to 24 users. Includes PAM and SRA features, agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC2-10-PAVUL-591-02-36
List Price: ~~$1,440.00~~
Our Price: $1,246.75

FortiPAM-VM 5 Year Subscription for one FortiPAM virtual machine appliance seat for 10 to 24 users. Includes PAM and SRA features, agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC2-10-PAVUL-591-02-60
List Price: ~~$2,400.00~~
Our Price: $2,077.92

FortiPAM-VM Subscription for one FortiPAM virtual machine appliance seat for 25 to 49 users

FortiPAM-VM 1 Year Subscription for one FortiPAM virtual machine appliance seat for 25 to 49 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC3-10-PAVUL-591-02-12
List Price: ~~$455.00~~
Our Price: $393.94

FortiPAM-VM 3 Year Subscription for one FortiPAM virtual machine appliance seat for 25 to 49 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC3-10-PAVUL-591-02-36
List Price: ~~$1,365.00~~
Our Price: $1,181.82

FortiPAM-VM 5 Year Subscription for one FortiPAM virtual machine appliance seat for 25 to 49 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC3-10-PAVUL-591-02-60
List Price: ~~$2,275.00~~
Our Price: $1,969.70

FortiPAM-VM Subscription for one FortiPAM virtual machine appliance seat for 50 to 99 users

FortiPAM-VM 1 Year Subscription for one FortiPAM virtual machine appliance seat for 50 to 99 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC4-10-PAVUL-591-02-12
List Price: ~~$425.00~~
Our Price: $367.97

FortiPAM-VM 3 Year Subscription for one FortiPAM virtual machine appliance seat for 50 to 99 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC4-10-PAVUL-591-02-36
List Price: ~~$1,275.00~~
Our Price: $1,103.90

FortiPAM-VM 5 Year Subscription for one FortiPAM virtual machine appliance seat for 50 to 99 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC4-10-PAVUL-591-02-60
List Price: ~~$2,125.00~~
Our Price: $1,839.83

FortiPAM-VM Subscription for one FortiPAM virtual machine appliance seat for 100 to 249 users

FortiPAM-VM 1 Year Subscription for one FortiPAM virtual machine appliance seat for 100 to 249 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC5-10-PAVUL-591-02-12
List Price: ~~$390.00~~
Our Price: $337.66

FortiPAM-VM 3 Year Subscription for one FortiPAM virtual machine appliance seat for 100 to 249 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC5-10-PAVUL-591-02-36
List Price: ~~$1,170.00~~
Our Price: $1,012.99

FortiPAM-VM 5 Year Subscription for one FortiPAM virtual machine appliance seat for 100 to 249 users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC5-10-PAVUL-591-02-60
List Price: ~~$1,950.00~~
Our Price: $1,688.31

FortiPAM-VM Subscription for one FortiPAM virtual machine appliance seat for 250 or more users

FortiPAM-VM 1 Year Subscription for one FortiPAM virtual machine appliance seat for 250 or more users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC6-10-PAVUL-591-02-12
List Price: ~~$350.00~~
Our Price: $303.03

FortiPAM-VM 3 Year Subscription for one FortiPAM virtual machine appliance seat for 250 or more users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC6-10-PAVUL-591-02-36
List Price: ~~$1,050.00~~
Our Price: $909.09

FortiPAM-VM 5 Year Subscription for one FortiPAM virtual machine appliance seat for 250 or more users. Includes PAM and SRA features, FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. Enables HA on DR appliance when purchased separately.

#FC6-10-PAVUL-591-02-60
List Price: ~~$1,750.00~~
Our Price: $1,515.15

FortiPAM-VM Subscription License for FortiPAM Virtual Machine, 1 - 5 Concurrent logon session(s)

FortiPAM-VM Subscription License 1 Year Subscription license for FortiPAM Virtual Machine, 1 - 5 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC1-10-PAVUL-1303-02-12
List Price: ~~$1,500.00~~
Our Price: $1,288.13

FortiPAM-VM Subscription License 3 Year Subscription license for FortiPAM Virtual Machine, 1 - 5 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC1-10-PAVUL-1303-02-36
List Price: ~~$4,500.00~~
Our Price: $3,864.38

FortiPAM-VM Subscription License 5 Year Subscription license for FortiPAM Virtual Machine, 1 - 5 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC1-10-PAVUL-1303-02-60
List Price: ~~$7,500.00~~
Our Price: $6,440.63

FortiPAM-VM Subscription License for FortiPAM Virtual Machine, 6 - 10 Concurrent logon session(s)

FortiPAM-VM Subscription License 1 Year Subscription license for FortiPAM Virtual Machine, 6 - 10 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC2-10-PAVUL-1303-02-12
List Price: ~~$1,450.00~~
Our Price: $1,245.19

FortiPAM-VM Subscription License 3 Year Subscription license for FortiPAM Virtual Machine, 6 - 10 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC2-10-PAVUL-1303-02-36
List Price: ~~$4,350.00~~
Our Price: $3,735.56

FortiPAM-VM Subscription License 5 Year Subscription license for FortiPAM Virtual Machine, 6 - 10 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC2-10-PAVUL-1303-02-60
List Price: ~~$7,250.00~~
Our Price: $6,225.94

FortiPAM-VM Subscription License for FortiPAM Virtual Machine, 11 - 20 Concurrent logon session(s)

FortiPAM-VM Subscription License 1 Year Subscription license for FortiPAM Virtual Machine, 11 - 20 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC3-10-PAVUL-1303-02-12
List Price: ~~$1,400.00~~
Our Price: $1,202.25

FortiPAM-VM Subscription License 3 Year Subscription license for FortiPAM Virtual Machine, 11 - 20 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC3-10-PAVUL-1303-02-36
List Price: ~~$4,200.00~~
Our Price: $3,606.75

FortiPAM-VM Subscription License 5 Year Subscription license for FortiPAM Virtual Machine, 11 - 20 Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC3-10-PAVUL-1303-02-60
List Price: ~~$7,000.00~~
Our Price: $6,011.25

FortiPAM-VM Subscription License for FortiPAM Virtual Machine, 21+ Concurrent logon session(s)

FortiPAM-VM Subscription License 1 Year Subscription license for FortiPAM Virtual Machine, 21+ Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC4-10-PAVUL-1303-02-12
List Price: ~~$1,350.00~~
Our Price: $1,159.31

FortiPAM-VM Subscription License 3 Year Subscription license for FortiPAM Virtual Machine, 21+ Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC4-10-PAVUL-1303-02-36
List Price: ~~$4,050.00~~
Our Price: $3,477.94

FortiPAM-VM Subscription License 5 Year Subscription license for FortiPAM Virtual Machine, 21+ Concurrent logon session(s). Includes FortiClient VRS agent for PAM and SRA, Advanced Malware Protection, and FortiCare Premium support. HA requires additional license.

#FC4-10-PAVUL-1303-02-60
List Price: ~~$6,750.00~~
Our Price: $5,796.56

FortiPAM Virtual Machines Privileged Access Management and Secure Remote Access