Forticlient Setup

FortiClient SSL VPN Silent Install with Group Policy 28 October 2015 I’m a big fan of Fortinet products; we’ve got a Fortigate firewall at work and it has always been completely reliable and easy (for a firewall) to configure. So when I had to implement a VPN for a handful of remote workers, I initially tried to use L2TP-IPSec which is supported by the Fortigate, but certain UK ISPs block or otherwise mess with IPSec traffic so I had to find an alternative. That alternative ended up being their proprietary SSL VPN. The client is very simple, it’s been completely reliable and the setup was extremely easy. However as more and more people have been using it, the fact I didn’t have a way to silently roll it out has become a bit of a pain. I mostly use either use with its or Group Policy to push out software to Windows machines, but I couldn’t find a (recent) MSI installer or a way to silently install with the EXE installer anywhere online or via their support team. Today I had a bit of a break through.

I discovered that the EXE installer creates an MSI during the installation process (although it doesn’t show up if you try to extract the EXE with 7-zip or similar) which I can now deploy with Group Policy. Heres how: • Download the latest installer package from. Navigate to Download > Firmware Images. Then select Fortigate as the product and click Download. Windows 2012 remote desktop licensing hack. At the time of writing the latest installer can be found in /FortiGate/v5.00/5.2/5.2.4/VPN/SSLVPNTools/sslvpnclient64pkg_4.4.2317.tar.gz • Open up the archive with something like and extract SslvpnClient.exe • Run SslvpnClient.exe but don’t click on anything in the installer • Navigate to C: Users username AppData Local Temp and you’ll find there is an SslvpnClient.msi that you can copy somewhere safe to deploy as normal with Group Policy. I clearly should have read the messages that the installer spits out. I would have found this out much sooner!

Here's the setup: I have a FortiGate unit on a business network, which has a FortiGate VPN set up. Machines on a remote network that can run FortiClient (Windows and Mac machines) have no problem connecting to this VPN. I have been tasked with getting Linux machines to connect to the VPN, which is unsupported by Fortigate.

However I’m surprised this isn’t documented anywhere online and their support team aren’t aware of it. As a little bonus, I found on the Fortinet forums. If you push out these Registry settings to HKEY_CURRENT_USER with the User Configuration > Preferences > Windows Settings > Registry part of Group Policy you can pre-configure the client and save your users some typing (and yourself some support queries).

This is an end to end connection which comes as a protective package on your system. It removes malware, viruses rootkit. Within the interface, you can update the application with web threats intelligence and definitions of what we call FortiGuard Labs. This is a tool which you can block any malicious content and websites which might carry harmful material to the system. This is a simple application which you can easily navigate in a virtual network.

This is an application with a VPN connection which protects you from external interferences. This is a tool which hosts the network protection of most state agencies who have no option but to secure their system. It is integrated with FortiAnalyzer, FotiManager, and FortiGate for supporting f deployments and reporting. Other additional features include we filtering to ensure every website pass through a screening process, scanning of the system to detect any vulnerability, optimization of the WAN, and automatic detection while on the net at the same time, it is the same tool responsible for rebranding. To keep the system safer the application supports authentication in a 2-factor method. This is a reliable tool which gives professional service when it comes to protection against any malware and firmware.