I let FortiClient to scan using its default settings and it only uses 11MB of memory. When it’s idle, it is using 4MB only. However, I’m not impressed with its heuristic detection (note this option in its antivirus is disabled by default) because when I re-scan the system with heuristic enabled, it detected 11 items - some are suspicious to FortiClient while others are possible threat: WinPatrol, TrojanHunter, A-squared Anti-Malware, SUPERAntiSpyware, Task Catcher and patch installer files by Microsoft was found to be suspicious while Vispa is a possible threat. I will not recommend using their heuristic detection unless you will change the setting to quarantine the file before it will do anything to what it will detect.
It’s easy to report False Positive to FortiClient via the scan result window. It’s becoming common to see false positive but a fast fix to such report should be done fast and let’s hope it will be fixed by them soon.
The firewall in FortiClient is rule-based which is useful and should be what administrators at home, office and business will enjoy. It’s quick to detect any attempt to use local and internet network connections and will prompt you to allow or not the request. The default setting of its firewall is to always ask but you can change its policy: to deny or pass all.
