FortiClient's Fortinet Security Fabric integration provides endpoint visibility through telemetry and ensures that all Security Fabric components - FortiGate, FortiAnalyzer, EMS, managed APs, managed Switches, and FortiSandbox - have a unified view of endpoints in order to provide tracking and awareness, compliance enforcement, and reporting. Traditional virtual private network (VPN) tunnels or automatic ZTNA tunnels provide secure remote connectivity. Provide security and protection for endpoints when local or remote.
FortiClient provides flexible options for VPN connectivity. It supports both secure sockets layer (SSL) and Internet Protocol security (IPsec) VPN. The split tunneling feature enables remote users on SSL VPNs to access the Internet without their traffic having to pass through the corporate VPN headend, as in a typical SSL VPN tunnel. This feature reduces latency, which improves user experience. At the same time, FortiClient includes protections to ensure that Internet-based transactions cannot backflow into the VPN connection and jeopardize the corporate network. In addition to simple remote connectivity, FortiClient simplifies the remote user experience with features such as autoconnect and always-on VPN, as well as dynamic VPN gate selection. You can also use multifactor authentication to provide an additional layer of security.
With ZTNA, organizations benefit from both a better remote access solution and a consistent policy for controlled access to applications irrespective of endpoint location.
Software inventory management
Software inventory management provides visibility into installed software applications and license management to improve security hygiene. You can use inventory information to detect and remove unnecessary or outdated applications that might have vulnerabilities to reduce your attack surface.
Windows AD integration
Windows AD integration helps sync organizations' AD structure into the central management tools so that you use the same organizational units from your AD server for simplified endpoint management.
Real-time endpoint status
Real-time endpoint status always provides current information on endpoint activity and security events.
Vulnerability dashboard
Vulnerability dashboard helps manage organizations attack surface. All vulnerable endpoints are easily identified for administrative action.
Centralized FortiClient deployment
Centralized FortiClient deployment and Provisioning that allows administrators to remotely deploy endpoint software and perform controlled upgrades. Makes deploying FortiClient configuration to thousands of clients an effortless task with a click of a button.
FortiSandbox integrations
FortiSandbox integrations assist with configuration and suspicious file analysis. Sandbox settings are synchronized across managed endpoints, simplifying setup. A detailed analysis of FortiClient submitted files is available in the central management tools. Administrators can see all the behavior activity of a file, including graphic visualization of the full process tree.
Telemetry
Telemetry provides real-time endpoint visibility (including user avatar) on FortiGate console so administrators can get a comprehensive view of the whole network. Telemetry also ensures that all fabric components have a unified view of the endpoints.
Dynamic access control for compliance enforcement
Dynamic access control for compliance enforcement requires EMS to create virtual groups based on endpoint security posture. These virtual groups are then retrieved by FortiGate and used in firewall policy for dynamic access control. Dynamic groups help automate and simplify compliance to security policies.
Endpoint quarantine
Endpoint quarantine helps to quickly disconnect a compromised endpoint from the network and stop it from infecting other assets.
Automated response
Automated response helps detect and isolate suspicious or compromised endpoints without manual intervention.
Application-based split tunnel
Application-based split tunnel supports source application- based split tunnel, where you can specify application traffic to exclude from the VPN tunnel, such as high bandwidth apps.
Web filtering with keyword search/YouTube filters
Web filtering with keyword search/YouTube filters blocks web pages containing words or patterns that you specify as well as limit users' access by blocking or only allowing specified YouTube channels.
