FortiClient: General Overview
While FortiGate protects at the network level, FortiClient is generally the software installed on individual devices — laptops, desktops, and mobile devices — to extend protection and policy enforcement to the endpoint itself.
VPN connectivity
Commonly used to establish a secure remote-access VPN connection back to an organization's network from outside the office.
Endpoint protection
Generally includes basic antivirus, web filtering, and firewall capabilities directly on the device.
Centralized policy enforcement
In organizational deployments, FortiClient is commonly managed centrally through FortiClient EMS, letting IT teams push consistent policies across many devices at once.
Standalone vs. centrally managed deployments
FortiClient is generally available as a standalone commercial tier for smaller-scale use without centralized management, or in a form managed centrally via FortiClient EMS (Endpoint Management Server) for organizations that need consistent policy enforcement, patching, and visibility across many devices. A free tier with more limited capabilities has also historically been available for basic use.
This is general educational information about the FortiClient product category, not deployment or licensing guidance for a specific organization. Check Fortinet's official documentation for current tiers and licensing details.