VPN client mafia tactics

Why doesn’t fortinet just ‘support’ their VPN client? I’ve waited 9 months for them to fix the ‘remember me’ issue then when upgrading the clients it would knock out their network if already connected

I was told either ‘do outside of hours’ (have they heard of WFH?) of pay them to use the buggy paid client for support for features I don’t care about

Anyone having this bad experience?

Why doesn’t fortinet just ‘support’ their VPN client?

Because support costs money?

That’s how it typically goes with most companies.

I’ve waited 9 months for them to fix the ‘remember me’ issue then when upgrading the clients it would knock out their network if already connected

I use the free VPN client, although not that often. Can you elaborate on the issue you are experiencing?

I pay enough as it is, you will see a post above to not give my users a bad experience I wrong a long powershell script to upgrade users clients, when told by support ‘do out of hours’ when I manage an international company is just not good enough, like they never heard of wfh

Without my script and if a user was logged into VPN it would completely knock out their network drivers, try and deal with South Africa, Greek, Spanish and German users in that way

Awful software, 7.2.1 the only one that worked without bugs had major security issues and only 7.2.5 (9 months later) did they fix the ‘remember me’ issue

Having to create this script over two days is not acceptable at Enterprise level


Disable the FA_Scheduler service

Set-Service -Name “FA_Scheduler” -StartupType Disabled

Define the path to the FortiClient command-line tool

Stop-process -name “fortiSSLVPNdaemon” -force

Start-Sleep -Seconds 10

taskkill /im FortiVPN.exe /t /f

taskkill /im FCDBLog.exe /t /f

taskkill /im FortiSettings.exe /t /f

taskkill /im FortiTray.exe /t /f

Kill the scheduler.exe process

Get-Process -Name “scheduler” -ErrorAction SilentlyContinue | Stop-Process -Force

Install FortiClient VPN

Write-Host “Installing FortiClient VPN…”

Start-Process Msiexec.exe -Wait -ArgumentList ‘/i FortiClient.msi /quiet /norestart’

Write-Host “FortiClient VPN installed.”

Start-Sleep -Seconds 5

Enable the FA_Scheduler service

Set-Service -Name “FA_Scheduler” -StartupType Automatic

Install VPN Profiles

$vpnKeyPath = “HKLM:\SOFTWARE\Fortinet\FortiClient\Sslvpn\Tunnels\COMPANYVPN”

if((Test-Path -LiteralPath $vpnKeyPath) -ne $true) {

Write-Host “Creating VPN profile…”

New-Item -Path $vpnKeyPath -Force -ErrorAction SilentlyContinue

}

Add VPN profile properties

Write-Host “Configuring VPN profile…”

New-ItemProperty -LiteralPath $vpnKeyPath -Name ‘Description’ -Value ‘whateveryourcompany’ -PropertyType String -Force -ErrorAction SilentlyContinue

New-ItemProperty -LiteralPath $vpnKeyPath -Name ‘Server’ -Value ‘vpn.yourcompany.domain:443’ -PropertyType String -Force -ErrorAction SilentlyContinue

New-ItemProperty -LiteralPath $vpnKeyPath -Name ‘promptusername’ -Value 1 -PropertyType DWord -Force -ErrorAction SilentlyContinue

New-ItemProperty -LiteralPath $vpnKeyPath -Name ‘promptcertificate’ -Value 0 -PropertyType DWord -Force -ErrorAction SilentlyContinue

New-ItemProperty -LiteralPath $vpnKeyPath -Name ‘ServerCert’ -Value ‘1’ -PropertyType String -Force -ErrorAction SilentlyContinue

New-ItemProperty -LiteralPath $vpnKeyPath -Name ‘sso_enabled’ -Value 1 -PropertyType DWord -Force -ErrorAction SilentlyContinue

New-ItemProperty -LiteralPath $vpnKeyPath -Name ‘use_external_browser’ -Value 1 -PropertyType DWord -Force -ErrorAction SilentlyContinue

Write-Host “VPN profile configured successfully.”