Forticlient VPN ARM processer

[aspnovac]

Hi,
We bought an Microsoft Surface Pro 9 which has an ARM processer.
The point of buying this was to hook it up with the Fortinet VPN, so we could go anywhere and still be connected.
Problem is i can't install it on the Surface Pro 9, due to having an ARM processer.
I was wondering if there was any early access or beta for Forticlient VPN for ARM processers that we could try?

Or is there any other solution?

I tried the Microsoft store app, but that doesn't seem to work with SAML.
The VPN connection is SAML with Azure.

[rg230250]

Technical Statement – IPsec VPN Limitation on FortiClient for Windows ARM
Context
Tests were conducted using FortiClient VPN version 7.4.3 on a device equipped with an ARM-based processor (Snapdragon) running Microsoft Windows 11 ARM (64-bit), with the objective of establishing an IPsec VPN connection to a corporate FortiGate firewall.

The FortiClient installation was performed using the official ARM build provided by Fortinet through the support portal, in accordance with vendor recommendations.

Official documentation reference
According to Fortinet’s official documentation:

“ARM-based processor support is in beta. As such, for ARM-based processors, FortiClient (Windows) supports a limited feature set.”
(FortiClient 7.4.3 – Product Integration and Support)

This statement explicitly indicates that ARM support is beta-level and does not guarantee full feature parity with the x64 (Intel/AMD) version.

Technical analysis
During testing, the following behavior was observed:

FortiClient installs and launches successfully;

User authentication completes without errors;

The IPsec tunnel establishment fails with a timeout, without explicit authentication or policy rejection errors;

No relevant errors are logged on the FortiGate firewall, indicating the failure occurs at the endpoint level;

The same VPN profile works correctly on Windows x64 (Intel/AMD) systems, excluding firewall or configuration issues.

This behavior is consistent with driver-level and kernel integration limitations, as IPsec VPN requires low-level networking components (NDIS / virtual network adapters). These components are not fully supported or stable in FortiClient for Windows ARM, in line with the beta support status described by Fortinet.

In practice, the “Remote Access (VPN)” capability referenced for ARM systems does not imply full IPsec VPN functionality, particularly for tunnel-based IPsec configurations.

Conclusion
Based on the tests performed and the official Fortinet documentation, it is concluded that:

FortiClient VPN 7.4.3 on Windows ARM does not provide reliable or fully supported IPsec VPN functionality;

The limitation is architectural and documented, related to the beta status of ARM support;

This is not a configuration, credential, certificate, or firewall issue;

Reinstallation or additional configuration changes do not resolve the limitation.

Technical recommendation
For environments requiring IPsec VPN connectivity, one of the following alternatives is recommended:

Use Windows x64 (Intel/AMD) systems;

Deploy Linux ARM with a native IPsec client (e.g., strongSwan);

Use an Android device with a compatible IPsec client;

Implement an alternative remote access architecture (e.g., RDP Gateway or non-client-based access).

The use of Windows ARM with FortiClient IPsec VPN is not recommended for production environments at this time.

Reference
Fortinet – FortiClient 7.4.3 – Product Integration and Support
https://docs.fortinet.com/document/forticlient/7.4.3/windows-release-notes/549781/product-integratio...