Technical Tip: FortiClient limitations, licensing, and support

Description

This article explains the differences between the free FortiClient VPN-only/standalone client and the licensed FortiClient managed by FortiClient EMS.

Scope  

FortiClient v7.0.x, v7.2.x, v7.4.x, and later releases where the same licensing model applies.

Solution

Free FortiClient will offer only the basic VPN features. (AV and other features are no longer present.)

Feature and support comparison:

See also FortiClient standalone and licensed version feature comparison for further information.  

Tickets can be reported by users for VPN issues with a FortiGate serial number managed by the FortiOS team. The user should be informed that there is no technical Support for the free FortiClient.

If the evidence isolates the failure to the free FortiClient endpoint itself (client software behavior, endpoint-only defect, unsupported client feature, or a requirement for client-side engineering), the user should be advised that the free VPN-only client does not carry the normal FortiClient TAC support entitlement.

Note: FortiClient (Android) from the Google Play Store running v7.4.x will not support SAML authentication for IPsec VPN, and it will fail authentication with or without multi-factor authentication.

Alternatively, the application named 'FortiClient' needs to be used.

Related articles:

Technical Tip: FortiClient licensing and support 

Technical Tip: FortiClient VPN Android fails to establish a VPN connection with IKEv2 and SAML with MFA enabled

Technical Tip: How to collect diagnostic logs from EMS and FortiClient for troubleshooting

Technical Tip: Remote IPsec VPN with FortiClient VPN in IOS devices