FortiGate firewalls support several different VPN connection types depending on your requirements. This section explains the differences between the available options and when each should be used.
IPsec VPN
IPsec VPN is a traditional VPN connection type focused on performance and stability.
Best for
Business environments
Frequent or long-term VPN usage
Higher performance requirements
Advantages
Reliable and secure
Better performance in some environments
Free FortiClient vs Managed FortiClient (EMS)
FortiClient is available as either a free VPN-only client or a centrally managed enterprise version using FortiClient EMS.
Free FortiClient
Includes:
IPsec VPN
Basic VPN connectivity
Best for:
Small businesses
Standard remote access
Managed FortiClient (EMS)
Includes:
IPsec VPN
Basic VPN connectivity
More robuse options for your VPN including Always On, and Always Connect functionality
Best for:
Larger organisations
Managed environments
L2TP/IPsec VPN (Windows Built-in VPN)
L2TP/IPsec allows Windows devices to connect using the built-in Windows VPN client without installing FortiClient.
Best for
Environments where software installation is restricted
Basic VPN connectivity
Advantages
No additional software required
Uses the built-in Windows VPN client
Considerations
Fewer features than FortiClient
Limited troubleshooting and advanced options