Azure Hybrid AD Join with Fortinet VPN Client

Hi all

we would like to setup a POC with an Azure Tenant and an AD which is On-Prem. To be able to have a successful Hybrid AD Join i need a VPN solution, which is connected before login.

We are looking about EMS currently but we only need the VPN part of it. As i saw in the internet since the version 6.2 the client needs to have a license and as an requirement we need to have an EMS Server.

Isn't there a way to have just an AlwaysOn VPN before Logon with the Forticlient without having an additional server? Having some kind of license wouldn't be an issue, but having a dedicated server is to much.

Many thanks for any feedback

Best regards, Marc