Fortinet product support for FortiClient

The following Fortinet products work together to support FortiClient:

• FortiClient EMS
• FortiManager
• FortiGate
• FortiAnalyzer
• FortiSandbox

FortiClient EMS

FortiClient EMS runs on a Windows server. EMS manages FortiClient endpoints by deploying FortiClient (Windows) and endpoint policies to endpoints, and the endpoints can connect FortiClient Telemetry to EMS. FortiClient endpoints can connect to EMS to participate in the Fortinet Security Fabric. FortiClient endpoints connect to EMS for real-time management.

For information on EMS, see the FortiClient EMS Administration Guide.

FortiManager

FortiManager provides central FortiClient management for FortiGates that FortiManager manages. When endpoints are connected to managed FortiGates, you can use FortiManager to monitor endpoints from multiple FortiGates.

For information on FortiManager, see the FortiManager Administration Guide.

FortiGate

FortiGate provides network security. EMS defines compliance verification rules for connected endpoints and communicates the rules to endpoints and the FortiGate. The FortiGate uses the rules and endpoint information from EMS to dynamically adjust security policies. When using FortiManager, FortiGates communicate between EMS and FortiManager.

For information on FortiGate, see the FortiOS documentation.

FortiAnalyzer

FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports. FortiAnalyzer receives other FortiClient data from EMS.

For information on FortiAnalyzer, see the FortiAnalyzer Administration Guide.

FortiSandbox

FortiSandbox offers capabilities to analyze new, previously unknown, and undetected virus samples in real time. Files sent to it are scanned first, using similar antivirus (AV) engine and signatures as are available on FortiOS and FortiClient. If the file is not detected but is an executable file, it is run in a Microsoft Windows virtual machine (VM) and monitored. The file is given a rating or score based on its activities and behavior in the VM.

As FortiSandbox receives files for scanning from various sources, it collects and generates AV signatures for such samples. FortiClient periodically downloads the latest AV signatures from FortiSandbox, and applies them locally to all realtime and on-demand AV scanning.

FortiClient supports connection to an on-premise FortiSandbox appliance or FortiClient Cloud Sandbox (PaaS). For more information, see the FortiSandbox Administration Guide.