Hi Everyone, I am trying to deploy FortiGate SSL-VPN and FortiClient with configuration settings baked in to FortiClient. I can get it to work with 6.0.10 from fndn but I am unable to find a version newer than 6.0.10.
How are you guys deploying FortiClient newer than 6.0.10 with configuration settings baked in?
Thanks in advance.
ems? no configuration using free forticlient
EMS pushes the conffiguration. You connect your FortiClients to your EMS at install time, with a custom MST transform.
Install FortiClient, add your settings, export config into XML file and then import on other machine.
"%ProgramFiles%\Fortinet\FortiClient\fcconfig.exe" -f FortiClient.xml -m all -o export -p12345678
"%ProgramFiles%\Fortinet\FortiClient\fcconfig.exe" -f FortiClient.xml -m all -o import -p12345678
Read the XML Reference Guide
You can also add run script after tunnel established and another after down, login and password from FortiClient can be transferred as parameters to script. It’s make capability for auto mounting user network shares, automatic RDP connection etc.
This is a licensed feature - Part of FortiClient EMS.
Not available in the free version.
Thanks Guys. Yeah looks like we’ll have to manually upgrade after 6.0.10 is installed and it retains the settings. Customer is keen to move to ZTNA licensing in the future so we will be able to do more then. Current requirement is to replace sophos vpn with FortiClient. So far customer is very happy with their Fortinet investment. Appreciate your quick responses.
Using the MSI and MS Intune or a .reg file
https://community.fortinet.com/t5/FortiGate/Installing-FortiClient-free-Version-7-2-1-Using-Intune-with-msi/ta-p/275442
EMS. The configuration tool hasn’t existed since 6.0.
SSL-VPN settings are stored in registry.
We use an automation procedure with our RMM to install the client then copy the registry keys to the target device