Software on a laptop that proves who the user is and that the device is safe, before opening one specific application. It replaces “connect to the whole network” with “connect to just this.”
FortiClient reports user identity and device posture. A FortiGate or FortiSASE gateway checks that against rules every session, then gives access to just the requested application, instead of placing the device on the network.
Vendors may support the very systems that run inmate technology. Administrators need to control exactly what each contractor can reach, and to see when they connected.
- Gives a vendor access only to the system they support.
- Records who connected, when and to what.
- Blocks access from a device that fails security checks.
- Application-level access instead of network-level access.
- Posture checks such as OS version or security software before connecting.
- Continuous verification during sessions.
- Encrypted connections from the client to the proxy.
| Control | Priority | How this helps |
|---|---|---|
| AC-17Remote Access | P1 | Controls each remote connection. |
| AC-6Least Privilege | P1* | Grants only the access needed. |
| AC-20Use of External Systems | P1 | Applies conditions on outside devices that connect. |
| MA-4Nonlocal Maintenance | P3 | Helps control and log vendors’ remote maintenance. |
| SC-8Transmission Confidentiality and Integrity | P2* | Encrypts sessions. |
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table