Fortinet FortiClient User manual

Personal computer (PC) desktop and laptop devices have empowered today’s business users with the capability to access enterprise applications
and mission critical data both in the office and on the road. The proliferation of highly mobile smartphone devices that use open operating systems
(OS) promise even greater access to enterprise applications and mission critical data. Unfortunately, all devices are exposed to blended threats
such as viruses, spam, spyware and worms. Additionally, users accessing inappropriate and dangerous web content jeopardize device integrity,
negatively impact productivity and create security and legal exposure. While point product security agent technology, such as antivirus agents,
are available to protect devices from certain threats, such methods fall short from comprehensively protecting against blended threats and do not
enforce content access guidelines.
FortiClient PC™ and FortiClient Mobile™ provide unified security agent features for personal computers and smartphones. The FortiClient product
is a client-based software solution designed to be used in connection with our FortiGate appliances to provide security features for enterprise
computers and mobile devices. The feature set includes personal firewall, IPsec VPN, antivirus, Web filtering, WAN acceleration, email DLP and
antispam. Powered by the FortiGuard security subscription services for constantly-updated protection to help ensure devices are protected on a
real-time basis against current and emerging threats, FortiClient lightweight unified software agents are available for Microsoft® Windows XP™,
Microsoft Vista™, Windows Mobile™ and Symbian™ operating systems.
FortiClient
™
Desktop, Laptop and PDA
Endpoint Security Solution
Unified Security Agent for PC and Mobile Endpoints
••••••••••••••••••
Datasheet
••••••••••••••••••
Blended Threats and Compliance Requirements
Threats are coming from every direction and cyber criminals are employing evermore sophisticated
tools. Unprotected networks are a sewer of nasty worms and zombies that exploit application vulner-
abilities to disable devices, steal information or access systems. If this were not enough web content
and web portals are used to snare unsuspecting and unprotected users into revealing sensitive infor-
mation such as passwords and as vehicles to plant poisonous mixes of new blended threats.
.
Key Solution Features and Benefits
Provides comprehensive protection against viruses, spyware, keyloggers,
Trojans, adware and grayware for Windows-based laptops desktops and
smartphones.
Empowers Windows based mobile laptops, desktops and smartphones
with the capability to access enterprise applications securely with DES /
3DES encryption.
Monitors network traffic and enforces the appropriate application access
control on Windows based laptops, desktops, smartphones and Symbian-
based smartphones.
Built in antispam that incorporates into MS Outlook for Windows based
desktop and laptops and SMS antispam for Windows and Symbian-based
mobile smart phones.
Provides real-time web content access enforcement to ensure compliance
is available for Windows-based laptops and desktops.
Block calls except for whitelisted callers, or callers in the Phone-
book. Forward blocked callers to another number. Send blocked calls
a text message. Provide local answering machine.
Encrypt contacts and SMS messages. Secure Notebook facility. File
encryption.
Speeds services like VPN for remote PC connections over the WAN.
Antivirus & Antispyware
Secure IPsec VPN
Powerful Personal Firewall
Advanced Antispam
Web Content Filtering
Mobile: Incoming Call Filter
Mobile: Phone Security
WAN Acceleration FortiClient Mobile
FortiClient PC
C
O
N
T
E
N
T
N
E
T
W
O
R
K
W
O
R
M
S
-
Z
O
M
B
I
E
S
V
I
R
U
S
-
S
P
Y
W
A
R
E
-
K
E
Y
L
O
G
G
E
R
S
S
P
A
M
-
W
E
B
P
H
I
S
H
I
N
G
A
P
P
L
I
C
A
T
I
O
N
S
N
E
T
W
O
R
K
B
l
e
n
d
e
d
T
h
r
e
a
t
s

FortiClient Securing Personal and Mobile Computing:
Application Protection
Application hacker tool kits utilize single or blended
application malware techniques to compromise a
devices operating system and associated applications.
FortiClient application multi-layered protection thwarts
viruses, spyware, adware, keylogger, dialer and
grayware techniques used by cyber criminals.
Network Protection
Network reconnaissance, sniffing of clear text traffic and
zero day network worms attempt to comprise devices.
FortiClient multi-layered Personal Firewall and IPsec VPN
capabilities thwart various network techniques used by
cyber criminals.
Content Policy Protection & Enforcement
Inappropriate email spam content typically harbors
an array of malware intended to negatively impact
productivity, while unsanctioned Web content access
violates corporate guidelines. FortiClient antispam and
Web content filtering features protect against unwanted
email content and restricts unapproved web content
access.
Deployment Overview
END POINT
Application Virus, Spyware
& Malware Threats
FortiClient PC
Application Protection
Viruses
Spyware
Adware
Keyloggers
Dialers
Antivirus
Antispyware
Antiadware
Antikeylogger
Antidialer
Application Threat Vectors
Application ACL
END POINT
Network Threats
FortiClient PC
Network Protection
DDOS
DOS
Port Scanning
RFC Compliance
Pattern Matching
Network Threat Vectors
Personal Firewall
IPsec VPN
END POINT
Spam and Web
Content Threats
FortiClient PC
Content Policy Enforcement
Pornographic Sites
Racism/Hate Sites
Phishing Sites
Antispam
Content Policy Threats
Web Content
Filtering Firewall
Spam
ENTERPRISE
NETWORK
MOBILE
NETWORK
PC
Mobile
Mobile
Centralized Reporting
PC
Centralized ManagementCentralized Reporting Centralized Management
WIRELESS
NETWORK
CORPORATE
LAN

FortiClient Features
FortiClient supports the following features:
Provides enforcement of security policies and configuration lock down of devices with a password
override feature available. Bulk installs via Windows Installer script feature for FortiClient PC.
Note: FortiManager/FortiAnalyzer support is only for FortiClient PC.
FortiManager’s Update Manager provides local hosting and deployment of FortiGuard Security
Subscription Services for FortiClient PC.
Both FortiClient PC and FortiClient Mobile support a “suite” mode which includes the complete
security feature set. FortiClient PC also supports a “light” mode providing only Personal Firewall and
VPN capabilities.
FortiClient PC is available in enterprise bundles while FortiClient Mobile is available on a per device
basis. Both provide a complete multi-layered suite of security features at the price point of tradi-
tional single antivirus security agents.
Central management of
devices using FortiMan-
ager system
Local antivirus, antispam
and Web content filtering
signature updates
Single security agent
available in two modes
Flexible product
packaging
Specifications FortiClient PC Windows Mobile Symbian
Supported Platforms........................................Windows XP, Windows Server 2003 .................Symbian S60 7/8/9........................................... Windows Mobile 2003,
................................................................Windows 2000, Windows Vista ........................ ......................................................................... 2003SE, 5.0, 6.0
Security Features:
Antivirus........................................................... Yes................................................................... Yes.................................................................... Yes
Personal Firewall ............................................. Yes................................................................... Yes.................................................................... No
Intrusion Protection System (IPS) ................... Yes................................................................... No..................................................................... No
Address Book Protection.................................. Yes................................................................... No ..................................................................... Yes
IPSEC VPN ........................................................ Yes................................................................... No..................................................................... Yes
Email Antispam ................................................ Yes................................................................... No ..................................................................... No
Email DLP......................................................... Yes................................................................... No..................................................................... No
Web Content Filtering ......................................Yes................................................................... No ..................................................................... No
WAN Acceleration............................................. Yes................................................................... No..................................................................... No
SMS Antispam.................................................. Yes................................................................... Yes.................................................................... Yes
SMS Filtering ................................................... N/A .................................................................. Yes.................................................................... Yes
Centralized Policy Management
Fortinet’s management system makes
deployment, configuration and policy
control quick and easy.
Deployment Scalability
FortiClient deployments can scale to an
unlimited number of devices and receive
security subscription updates from the
FortiGuard update service or from the
FortiManager system.
Low Total Cost of Ownership
Unlike point product agents that provide a
single security feature, FortiClient is a true
unified security agent that bundles all the
necessary capabilities into a single low cost
and easy to manage application.
FortiClient PC FortiClient Mobile

Copyright© 2009 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company
names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions. Network variables, different network environments and other conditions may
affect performance results, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding contract with a purchaser that expressly warrants that the identied product will perform
according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet
reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. Certain Fortinet products are licensed under U.S. Patent No.
5,623,600. FTC-4.0-DAT-R1-0809
••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••
About Fortinet (www.fortinet.com)
Fortinet is the pioneer and leading provider of ASIC-accelerated unied threat management, or UTM, security systems, which are used by enterprises and service providers
to increase their security while reducing total operating costs. Fortinet solutions were built from the ground up to integrate multiple levels of security protection--including
rewall, antivirus, intrusion prevention, VPN, spyware prevention and anti-spam -- designed to help customers protect against network and content level threats. Leveraging
a custom ASIC and unied interface, Fortinet solutions offer advanced security functionality that scales from remote ofce to chassis-based solutions with integrated
management and reporting. Fortinet solutions have won multiple awards around the world and are the only security products that are certied in ve programs by ICSA Labs:
(Firewall, Antivirus, IPSec, Network IPS and Anti-Spam). Fortinet is privately held and based in Sunnyvale, California.
GENERAL
Anti-Leak Banned Word List
Desktop Antivirus
Remote VPN Client
Personal Firewall
Antivirus Scanning / Cleaning
Quarantine Infected Files
Registry Monitoring
User-Definable File Types for Scanning
Scans Compressed Files
Scheduled Scanning
Antivirus and Spyware Scanning
Manual and Scheduled Updates
Antivirus Logs
Mobile: Phone Security
Mobile: Incoming Call Filter
CENTRALIZED MANAGEMENT
Client Version and Status Monitoring
Update Server Override
Central Logging and Reporting
Configuration Lockdown
Group Configurations
USER AUTHENTICATION
Extended Authentication (XAUTH)
Management, Logging, and Monitoring
Searchable VPN Logs
VPN Tunnel Diagnostics Test
VPN Connection Monitor
Packet Logs
ANTIVIRUS / ANTISPYWARE
Configurable File Types to Scan Including Files with No
Extension
Manual Scan
Real-time Protection
Automatic Submission of Suspicious Files to Fortinet
Notification Virus Signature is Out of Date
Email Scanning Incoming and Outgoing Including Attachments
Heuristics Scanning
Virus File Quarantine
PERSONAL FIREWALL
Configurable Network Security Zones
Intrusion Prevention
Advanced Firewall Rules
Security Levels: Low, Medium, and High
Application Access Control
Intrusion Blocking
Zone-Based Traffic Control
Active Connection Monitor
ANTISPAM
Supports Outlook Express, Outlook 2000 and Newer Versions
Customizeable Banned Word List
Customizeable Black/White List
Continuously Updated Database
Automatic Submission of MIS-Rated Emails
CRYPTOGRAPHY
3DES And DES
SHA-1 And MD5
AES (128, 192, 256-Bit)
PKI
PKCS #7 Certificate Chains
PKCS #12 Certificate Import
IPSEC VPN
Autokey IKE (Preshared) / Authkey IKE Certificate
ESP and AH
NAT Traversal
Main and Aggressive Mode IKE
Redundant Gateway Support
DHCP over IPsec
Manual Virtual IP
Multiple Remote Networks
VPN Policy Retrieval from FortiGate® Unit
Dead Peer Detection
Simplified Configuration Process
Split Tunneling
WEB CONTENT FILTERING
76 Categories
HTTPS Site Inspection/Blocking
Password Protected Config
Customizable Block Profiles
Predefined Usage Profiles for Adults and Children
User Definable Block / Bypass List
Continuously Updated Database
FortiClient PC
SYSTEM REQUIREMENTS
PC-Compatible Computer with Pentium Processor or
Equivalent
Operating Systems and Minimum RAM:
- Microsoft Windows 2000 - 64MB
- Microsoft Windows XP - 128MB
- Microsoft Windows Server 2003 - 128MB
- Microsoft Windows Vista - 512MB
20MB of Free Hard Disk Space
Native Microsoft TCP/IP Communications Protocol
Native Microsoft PPP Dialer for Dial-Up Connections
Ethernet for Network Connections
Microsoft Internet Explorer 5.0 or Later
FortiClient Mobile
WINDOWS MOBILE SYSTEM REQUIREMENTS
Mobile Device with ARM Processor or Equivalent
Compatible Operating Systems:
- Windows Mobile 2003, 2003SE, 5.0, 6.0
- Pocket PC 2003, Pocket PC 2003 SE, Pocket PC 2003
Phone Edition, Pocket PC 2003 Phone Edition SE
3MB Free Disk Space
English and Simplified Chinese Language Support
FortiClient Mobile
SYMBIAN OS SYSTEM REQUIREMENTS
Mobile Device with ARM Processor or Equivalent
Compatible Operating Systems:
- Symbian S60 7/8/9
500 KB Free Disk Space
English and Simplified Chinese Language Support
TECHNICAL SPECIFICATIONS AND FEATURES
FortiGuard®Subscription Services
Includes:
 •Automaticupdatesfromover50redundanthigh-speeddatabaseserversaroundtheglobe.
 •CompleteWildlistvirusprotectionforover30,000activevirusesfromFortiGuard’sactivedatabaseofover1.5Millionviruses.
 •Real-timesignatureupdatesforprotectionagainstover5,100threats.
 •77ratedWebcategoriesformoreaccurateWebcontentfiltering.
 •Webfilteringformorethan47millionURLswithmorethan70languagessupported.
8x5 Enhance Support (Optional)
Premium Support (Optional)
24x7 Comprehensive Support (Optional)
Professional Services (Optional)
90-Day Limited Software Warranty
FortiCare®Subscription Services
GLOBAL HEADQUARTERS
Fortinet Incorporated
1090 Kifer Road, Sunnyvale, CA 94086 USA
Tel [phone]
Fax [phone]
www.fortinet.com/sales
EMEA SALES OFFICE-FRANCE
Fortinet Incorporated
120 rue Albert Caquot
06560, Sophia Antipolis, France
Tel [phone]
Fax [phone]
APAC SALES OFFICE-SINGAPORE
Fortinet Incorporated
61 Robinson Road
#09-04 Robinson Centre
Singapore 068893
Tel: [phone]
Fax: [phone]