FortiClient (Android) 6.4 supports tunnel mode SSL VPN connections. You can configure the SSL VPN in the FortiClient user interface or provision SSL VPN connections in an endpoint profile from FortiClient EMS. FortiClient EMS pushes provisioned SSL VPN configurations to your Android device after the FortiClient (Android) successfully connects with FortiGate for Endpoint Control and with FortiClient EMS for provisioning and monitoring.
You can configure X.509 certificates, CA server certificates, and check server certificates. You can also configure always up and auto connect for the VPN connection.
For three days after initial FortiClient (Android) installation, you can configure and establish a VPN connection to a FortiGate, allowing the endpoint to reach an EMS behind a FortiGate. This is especially useful for remote users, as it allows them to connect to the corporate network to activate their FortiClient (Android) license.