Installing FortiClient VPN (client only) to replace FortiClient (full bundle)

Infinite_New1 · April 23, 2020, 7:25pm

Hello,

We have a situation that we need to install the FortiClient VPN to replace FortiClient (full bundre with AV, VPN, etc etc). We are changing the antivirus by opting the Comodo that was included in the deal I guess. Since everybody is working at home and that the company choose ITarian just 2 weeks before I was hired, it’s a nice occasion to use the full power of ITarian. The problem is I don’t know ITarian or Python at all.

I have a MSI or EXE installation file and a REG configuration one. The latter should be install first and the application after. I don’t want to touch the full client for now, it would be difficult to remove it and install the VPN one at the same time. I can provide files and/or information, don’t hesitate.

So I need help since it’s a first for me with this kind of scripting…

Thank you in advance.

PremJkumar · April 24, 2020, 6:02am

Hi @Infinite_New1,

Thanks for your script request. We have asked our script developers to check and provide their feedback.

Kind Regards,
PremJK

PremJkumar · April 24, 2020, 12:19pm

Hi @Infinite_New1 ,

Our script developers request the installation file and configuration file to analyse more on this. Please provide the same.

Kind Regards,
PremJK

asdadmin · December 11, 2020, 10:34am

Can I check if this script is completed? I have similar needs

PremJkumar · December 11, 2020, 2:00pm

Hi @asdadmin,

We were not able to process this script request as we didn’t receive requested setup files.
Can you please provide the file and configuration, if needed any.

Kind Regards,
PremJK

Infinite_New1 · December 11, 2020, 6:52pm

Sorry I never return to this discussion. We finally took down the FortiClient (full bundle) one by one (long story).

But making a script just for installing FortiClient VPN would be nice. If we can have a connection profile pre-configured would be even better.

I’ll check if it’s feasible by registry or conf file and return here when possible with more info. But not today…

Thank you.

PremJkumar · December 14, 2020, 7:23am

Hi @Infinite_New1,

Our script developers will be happy to provide script for your request. Please provide requested details, when you are free.

Kind Regards,
PremJK

DevoteamEndpointSecu · December 15, 2020, 1:51pm

Hi @Infinite_New1

We are no longer using FortiClient, we used it until version 5.4.2.0860 and we have switched recently to a different VPN solution, but maybe this will be useful to you.

We used to deploy it with a CMD script in two steps. The first one did the usual unattended installation using msiexec with the parameters recommended in the FortiClient documentation:

msiexec /i "C:\Temp\FortiClient.msi" TRANSFORMS="C:\Temp\FortiClient.mst" USESWUID=1 ADMINMODE=1 /qn /L*v "C:\SetupLogs\FortiClient_5.4.2.0860_Setup.log"

The second step was used to import the connection configuration in xml format using the FCConfig tool included in FortiClient installation:

"C:\Program Files (x86)\Fortinet\FortiClient\FCConfig.exe" -f C:\Temp\FortiClient_BaseConfig.conf -m all -o import -q
"C:\Program Files (x86)\Fortinet\FortiClient\FCConfig.exe" -f C:\Temp\FortiClient_ConfigVPN.conn -m vpn -o importvpn -q

We did two imports because we had a common base configuration for all sites and a specific VPN for several sites, but you can just enter the VPN configuration in the main .conf file and do all the config in a single step.

Check the FortiNet documentation for further details and information: https://docs.fortinet.com/document/forticlient/6.0.2/xml-reference-guide/515041/back-up-and-restore-command-line-utility-commands-and-syntax

Hope this will be helpful for you.

Regards,
– Javier Llorente
Endpoint Security - Devoteam

asdadmin · December 17, 2020, 1:47am

Hi PremJK,

In our case, we are using the forticlient VPN as listed in the web link below:

https://filestore.fortinet.com/forticlient/downloads/FortiClientVPNOnlineInstaller_6.4.exe

This is the latest version for forticlient. First we need to uninstall the old version, install the new version and then load the conf.

Regards
IT Admin

PremJkumar · December 17, 2020, 9:53am

Hi @asdadmin,

Thanks for providing setup file. We have asked our script developers to analyse and provide feedback.

Kind Regards,
PremJK

PremJkumar · December 18, 2020, 6:05am

Hi @asdadmin,

Please try this script prepared by our script developers and provide feedback

Uninstall FortiClient VPN
https://scripts.itarian.com/frontend/web/topic/uninstall-forticlient-vpn

Install FortiClient VPN
https://scripts.itarian.com/frontend/web/topic/lnstall-forticlient-vpn

Kind Regards,
PremJK

sourloemon · December 30, 2020, 3:20pm

tHi everybody,

Your script is run but spesic settings cannot add reg file if this reg file is add very good

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FortiClient\S slvpn\Tunnels\COMPANY]
“Description”=“COMPANY”
“Server”=“vpn.company.com:443”
“DATA1”=“EncLM bc8a37673ae67f16e5ba1c5d953a28479b2a58433f50981f17 b98bf09f9f113377088e7749a00fb9bdf18566ef94e25a575c 7a524b0480b08226cdb49da7ee2521a46848dc4e8d68d025da 1922569eb65d831fb6dd65bdc8f55f01d434744f535eba894d 9f1b2e1c925dd1a28d5f41b90ba4de159d746d90f80874aa64 2017bbd8ab5ac4ea7eaecae3a50989708b9663be2808b659cf 604ea6944ce43adebce0fc438b7dbddaa1e0dbda3e79e8d8ac be4e783d8d9bbddc68252f0b0cc872956b0279444a216b851b 2c609337c1118e761241c803159be234378c6b41fe8e65a2ce 17eda544e3614c6164822dea593919e61d877cd510c33177fb 803f71e83035cc02553d5f7ba64cf7cfbbc868fa0710047328 b2dd9cbd2b24c29c1840959cdddb3a720c88b9”
“promptusername”=dword:00000001
“promptcertificate”=dword:00000000
“DATA3”=hex(7):00,00
“ServerCert”=“0”
“sso_enabled”=dword:00000000

PremJkumar · January 4, 2021, 6:18am

Hi @sourloemon,

Thanks for your request. Will ask our script developers to provide updated script.

Kind Regards,
PremJK

PremJkumar · January 5, 2021, 6:55am

Hi @sourloemon,

Please run this script prepared by our script developers in JSON format and provide your feedback

Kind Regards,
PremJK

20210105-Install_FortiClient_Vpn_with_registry.json (6.5 KB)

sourloemon · January 5, 2021, 7:16am

I want cahange COMPANY vpn.company.com:443 how to change ??

PremJkumar · January 5, 2021, 1:39pm

Hi @sourloemon,

Please run this updated script in JSON format and check the attachment to change company in imported procedure.

Kind Regards,
PremJK

20210105-Install_FortiClient_Vpn_with_registry (1).json (6.13 KB)

PremJkumar · January 18, 2021, 6:24am

Hi @sourloemon,

Please run this updated script and let us know the output

Check the attachment to change company in the imported procedure

Kind Regards,
PremJK

20210105-Install_FortiClient_Vpn_with_registry.json (6.13 KB)

sourloemon · January 18, 2021, 6:27am

2021/01/05 02:18:41 PM

Finished success

C:\ProgramData\FortiClientVPN.exe - 122581KB FortiClientVPN.exe check C:\ProgramData\FortiClientVPN.exe /quiet /norestart FortiClient VPN BAŞARILI KURULDU 0 C:\ProgramData\FortiClient_Registry.reg