FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
Article Id 196327


This article explains FortiClient licensing and support in different versions.


All versions of FortiClient.


FortiClient 6.0.x Licensing

FortiClient offers two licensing modes:

- Standalone mode.
- Managed mode.

Standalone mode

FortiClient in standalone mode does not require a license.
If there is no EMS license or FortiGate FortiClient Telemetry license, no Fortinet support is provided.
A license is required to access Fortinet support.
Support for FortiClient in standalone mode is provided on the Fortinet Forums (
Phone support from the Fortinet Technical Assistance Center is not provided unless a FortiClient license is purchased.

Managed mode

FortiClient in managed mode requires a license.
In managed mode, apply FortiClient licensing to FortiGate or EMS.
When using the ten free trial licenses for FortiClient in managed mode, support is available on the Fortinet Forums.
Phone support is not provided when using the free trial licenses.
Phone support is provided for paid licenses.

FortiClient licenses on a FortiOS 6.0.x FortiGate

FortiGate 30 series and higher models include a FortiClient free trial license for ten connected FortiClient endpoints. For additionally connected endpoints, a FortiClient license subscription must be purchased. Contact your Fortinet sales representative for information about FortiClient licenses.

FortiClient licenses on EMS 6.0.x

EMS includes a FortiClient free trial license for ten connected FortiClient endpoints for evaluation. For additionally connected endpoints, purchase a FortiClient license subscription.
Contact a Fortinet sales representative for information about FortiClient licenses.

FortiClient licensing on versions 6.2.x and 6.4.x


See the release notes for licensing information.     


FortiClient 6.0.x needs either an EMS license or a FortiClient endpoint & telemetry license on the FortiGate to receive support.
FortiClient 6.2.x needs an EMS license for support. Endpoint & telemetry no longer exists for these clients.
EMS 6.2.7 and above support a trial license. With the EMS free trial license, it is possible to provision and manage FortiClient on three Windows, macOS, and Linux endpoints and ten Chromebook endpoints indefinitely. (In previous versions of EMS, the maximum amount of FortiClient trial licenses was 10.)

The free version of FortiClient has the following features:


  • Basic IPSec & SSLVPN support (pre-shared key & certificate-based authentication).
  • Split tunnel support.
  • 2-factor authentication using FortiToken.
  • FortiGate-powered host check is available for free VPN client. Refer to this link.

The following features are not supported in the FortiClient v6.2.x to v7.2.x  free versions:


  • VPN auto-connect/always-up.
  • VPN before logon.
  • On-net/off-net.
  • Central management.
  • Feedback options and diagnostic tools under the help/info page.
  • IKEv2 (in the free version of FortiClient 6.2.x).
  • TAC support.

See this document for a list of features the FortiGate-powered host checks in FortiClient v7.0.3 and above support.


The following features are supported in the FortiClient 6.4.x and 7.0.x free versions:
  • SAML support for SSL VPN
  • IKEv2


Related docments: