FortiClient SSl

Per Fortinet's documentation, the full FortiClient does not have an API for managing SSL tunnels, only IPsec. If you have full FortiClient installed, you must preconfigure your IPsec connections and then RDM will be able to dial them, and SSL won't work with RDM at all. You can, however, install the small SSL-only client, and that one is fully manageable with RDM - define the tunnel IP, port, username and password within the RDM entry and it will dial automatically.

Hi, thanks for the reply,

can you expand on "the small SSL-only client".

Many thanks,
James.

http://dekiwiki.ties2.net/Fortinet/Fortinet_SSL_VPN_Client_Installers

i found the above BUT it says newer version installed. does the mean i need to remove the full client?

Cheers again.

Hi, removed the full client, installed the sslvpnclient. all working as expected.

Thank you very much.

James.

Hello,

Thanks @Boris for responding.

I'm new to the Forticlient wrapper, and this is the conclusion that we came to with the help of another customer. This happened just a few days ago and we havent had time to come up with a plan for reasons that will become clear as you read.

We interact in no way with the Forticlient application, but only with FortiSSLVPNclient.exe.

This FortiSSLVPNClient is available only to paying customers. Our customer that lent a hand mentioned that it is in the FortiClientTools download, in the SSLVPNcmdline folder.

This is true for version 5.4 of FortiSSLVPNClient.

Our issue as to the whole situation is that the current implementation was created with the help of a customer, that happened some time ago. We had modified the add-on to read other registry keys, and the customer was satisfied with that. Why is our current implementation ok for some users, but not for you?

We need to either: rename the addon; create a new addon just for the FortiSSLVPNClient; add support for various executables/versions, etc

At the very least, we have a few topics of help to rewrite.


Please let us know your thoughts

FortiClientSSL can be downloaded directly off any FortiGate box - the link is inside the SSL VPN portal.

As for the full client available at www.forticlient.com, documentation is here: http://docs.fortinet.com/uploaded/files/3393/FortiClient-5.4.2-Administration-Guide.pdf

Page 125 explicitly states:


You can operate FortiClient VPNs using the COM-based FortiClient API. The API can be used with IPsec VPN only. SSL VPN is currently not supported.