Fortinet black logo

Administration Guide

Microsoft Windows

Microsoft Windows

The following instructions guide you though the installation of FortiClient on a Microsoft Windows computer. For more information, see the FortiClient (Windows) Release Notes.

When installing FortiClient, it is recommended to use the FortiClientOnlineInstaller file. This file launches the FortiClient Virus Cleaner which scans the target system prior to installing the FortiClient application. The FortiClientOnlineInstaller file always installs the latest FortiClient version available on the FortiGuard Distribution Network (FDN), not the FortiClient version referenced in the filename or listed on the Customer Service & Support site.

To check FortiClient's digital signature, right-click the installation file and select Properties. In this menu you can set file attributes, run the compatibility troubleshooter, view the digital signature and certificate, install the certificate, set file permissions, and view file details.

  1. Double-click the FortiClient executable file. The Setup Wizard launches.

    When using the FortiClientOnlineInstaller file, the FortiClient Virus Cleaner runs before launching the Setup Wizard.

    If a virus is found that prevents the infected system from downloading the new FortiClient package, see Installing FortiClient on infected systems.

  2. In the Welcome to the FortiClient Setup Wizard screen, perform the following actions:
    1. Click the License Agreement button, and read the license agreement. You have the option to print the EULA in this License Agreement screen. Click Close to return to the installation wizard.
    2. Select the Yes, I have read and accept the license checkbox.
  3. Click Next to continue.

    The Choose Setup Type screen displays.

  4. Select one or more of the following setup types:

    The Security Fabric Agent option is enabled by default, and you cannot deselect it. See FortiClient setup types and modules.

    • Security Fabric Agent: Endpoint telemetry, host vulnerability scanning and remediation
    • Secure Remote Access: VPN components (IPsec and SSL) will be installed
    • Advanced Persistent Threat (APT) Components: FortiSandbox detection and quarantine features
    • Additional Security Features: AV, Web Filtering, Single Sign On, Application Firewall
  5. Click Next to continue The Destination Folder screen displays.
  6. (Optional) Click Change to choose an alternate folder destination for installation.
  7. Click Next to continue.

    FortiClient searches the target system for other installed AV software. If found, FortiClient displays the Conflicting Antivirus Software page. You can exit the current installation and uninstall the AV software, disable the conflicting software's AV feature, or continue with the installation with FortiClient RTP disabled.

    FortiClient automatically disables RTP when:

    1. The OS is a server, or
    2. Exchange Server is detected, or
    3. SQL Server is detected.
    A dialog displays during a new installation of FortiClient and when upgrading from an older version of FortiClient that does not have the AV feature installed.
    It is recommended to uninstall conflicting AV software before installing FortiClient or enabling the AV RTP feature. Alternatively, you can disable the conflicting software's AV feature.
  8. Click Next. The Ready to install FortiClient screen displays.
  9. Click Install.
  10. Click Finish.

    On a new FortiClient installation, you do not need to reboot your system. When upgrading the FortiClient version, you must restart your system for the configuration changes made to FortiClient to take effect. Select Yes to restart your system now or select No to manually restart later.

    FortiClient updates signatures and components from the FDN.

  11. FortiClient attempts to connect FortiClient Telemetry to the FortiGate.

    If the FortiGate cannot be located on the network, manually connect FortiClient Telemetry. See Connecting FortiClient Telemetry manually.

    If you have questions about connecting FortiClient Telemetry to FortiGate, contact your network administrator.

  12. To launch FortiClient, double-click the desktop shortcut.

Microsoft Windows

The following instructions guide you though the installation of FortiClient on a Microsoft Windows computer. For more information, see the FortiClient (Windows) Release Notes.

When installing FortiClient, it is recommended to use the FortiClientOnlineInstaller file. This file launches the FortiClient Virus Cleaner which scans the target system prior to installing the FortiClient application. The FortiClientOnlineInstaller file always installs the latest FortiClient version available on the FortiGuard Distribution Network (FDN), not the FortiClient version referenced in the filename or listed on the Customer Service & Support site.

To check FortiClient's digital signature, right-click the installation file and select Properties. In this menu you can set file attributes, run the compatibility troubleshooter, view the digital signature and certificate, install the certificate, set file permissions, and view file details.

  1. Double-click the FortiClient executable file. The Setup Wizard launches.

    When using the FortiClientOnlineInstaller file, the FortiClient Virus Cleaner runs before launching the Setup Wizard.

    If a virus is found that prevents the infected system from downloading the new FortiClient package, see Installing FortiClient on infected systems.

  2. In the Welcome to the FortiClient Setup Wizard screen, perform the following actions:
    1. Click the License Agreement button, and read the license agreement. You have the option to print the EULA in this License Agreement screen. Click Close to return to the installation wizard.
    2. Select the Yes, I have read and accept the license checkbox.
  3. Click Next to continue.

    The Choose Setup Type screen displays.

  4. Select one or more of the following setup types:

    The Security Fabric Agent option is enabled by default, and you cannot deselect it. See FortiClient setup types and modules.

    • Security Fabric Agent: Endpoint telemetry, host vulnerability scanning and remediation
    • Secure Remote Access: VPN components (IPsec and SSL) will be installed
    • Advanced Persistent Threat (APT) Components: FortiSandbox detection and quarantine features
    • Additional Security Features: AV, Web Filtering, Single Sign On, Application Firewall
  5. Click Next to continue The Destination Folder screen displays.
  6. (Optional) Click Change to choose an alternate folder destination for installation.
  7. Click Next to continue.

    FortiClient searches the target system for other installed AV software. If found, FortiClient displays the Conflicting Antivirus Software page. You can exit the current installation and uninstall the AV software, disable the conflicting software's AV feature, or continue with the installation with FortiClient RTP disabled.

    FortiClient automatically disables RTP when:

    1. The OS is a server, or
    2. Exchange Server is detected, or
    3. SQL Server is detected.
    A dialog displays during a new installation of FortiClient and when upgrading from an older version of FortiClient that does not have the AV feature installed.
    It is recommended to uninstall conflicting AV software before installing FortiClient or enabling the AV RTP feature. Alternatively, you can disable the conflicting software's AV feature.
  8. Click Next. The Ready to install FortiClient screen displays.
  9. Click Install.
  10. Click Finish.

    On a new FortiClient installation, you do not need to reboot your system. When upgrading the FortiClient version, you must restart your system for the configuration changes made to FortiClient to take effect. Select Yes to restart your system now or select No to manually restart later.

    FortiClient updates signatures and components from the FDN.

  11. FortiClient attempts to connect FortiClient Telemetry to the FortiGate.

    If the FortiGate cannot be located on the network, manually connect FortiClient Telemetry. See Connecting FortiClient Telemetry manually.

    If you have questions about connecting FortiClient Telemetry to FortiGate, contact your network administrator.

  12. To launch FortiClient, double-click the desktop shortcut.