Do you need a FortiClient to be able to use ZTNA?

[labodd]

Hello,

Currently we use FortiClient for SSL-VPN connection to our corporate network.
We have licenses to use ZTNA also.

Plan is to implement ZTNA.
Is FortiClient needed or it can be without it?

[kgeorge]

Hello @labodd,

FortiClient application is very much required on End Points to synchronize ZTNA Tags and Profiles from FortiClient EMS through "Zero Trust Telemetry".

https://docs.fortinet.com/document/fortigate/7.0.0/ztna-architecture/19197/ztna-access-proxy#HTTPS
https://docs.fortinet.com/document/fortigate/7.0.0/new-features/325639/ztna-https-access-proxy-examp...

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/101256/ztna-tcp-forwarding-access-pr...

Have a nice day!

[AEK]

Hi

There are three mandatory components for ZTNA to work: FGT, FCT and FCT EMS.

If any of them is missing then you can't do ZTNA.