Hi,
I'm using RDM for work and we're using Fortifient with our clients.
On Windows, RDM with Forticlient works perfectly.
I've just transitioned to Mac and I'm wondering how to configure Forticlient on RDM for MacOS.
I've already installed Forticlient on my Mac and it's working, but when I'm trying to connect to a clients, I receive an error message saying that it cannot connect to the VPN connection.
Thanks for your help,
Hi,
This is because FortiClient has not been implemented in RDM Mac.
RDM Windows uses command line to connect to the FortiClient executable. As far as I'm aware, FortiClient for macOS does not support any such command line, so there are no proper way for RDM Mac to communicate with the FortiClient application.
There doesn't seem to be any documentation for this. If I'm wrong, and you are aware of a way to programmatically communicate with the FortiClient app, please, let me know.
Best regards,
Xavier Fortin
Thanks for the response.
Do someone knows if this is something planned in the futur ?
Or if's there's an alternative to that situation ?
Thanks,
Xavier
If your talking about FortiClient specifically, this is probably something better asked to them. You could possibly make a feature request for them to implement a CLI, or AppleScript support, or any mean to use it via script.
Best regards,
Xavier Fortin
There is an open source version of it:
GitHub - adrienverge/openfortivpn: Client for PPP+SSL VPN tunnel services
Yes, we've already edited the ticket for this from your other thread. This is still on our TODO list. We have a ticket opened to make a testing environment.
Best regards,
Xavier Fortin
Hello,
We are working on a way to implement the open source version of FortiVPN but we came across a problem in our implementation. OpenFortiVPN demand root access and we can't really automate admin password authentication.
That leave us with the option that if you start fortivpn, it would open a terminal window with the command line already filled and the user would have to enter his sudo password in the terminal. Would that seem acceptable?
Best regards,
Michel Lambert