Technical Tip: Deploy FortiClient exe installer using Microsoft Intune

Considering that deploying FortiClient with the Digital Experience Monitoring (DEM) agent is only possible when using the preconfigured .exe FortiClient installer.

The following method can be used to deploy the FortiClient for Windows using Microsoft Intune.

1. Download the required files:

• Download the preconfigured FortiClient installer from the FortiSASE portal.

Note: The preconfigured installer includes the FortiSASE configuration, the DEM agents, and the invitation code.

• Download the Microsoft Win32 Content Prep Tool (IntuneWinAppUtil.exe) from the Microsoft Download Center. 

Prepare Win32 App Content for Upload

2. On a Windows computer, open a Command Prompt as an administrator and navigate to the folder containing IntuneWinAppUtil.exe downloaded earlier.

3. Convert the FortiClient installer  into a .intunewin package using the following command: 

    

IntuneWinAppUtil -c <source_folder> -s <source_setup_file> -o <output_path>

Note: Replace <source_folder> with the path of the FortiClient installer, <source_setup_file>  with the installer name, and <output_path> with the desired output folder for the Intunewin package.

4. Create the Intune FortiClient application on the Microsoft Endpoint Manager admin center:

1. Go to Apps -> All apps -> Create.

2. From the App type dropdown list, select Windows app (Win32).

3. Select the App package file, then upload the file from step 3, then select ok.
                                                                       

4. Enter the name, description, and publisher information as desired, then select Next.

5. For the install command field, enter:

Note: Replace <FortiClientSetup_7.2.12_x64> with the <source_setup_file>  used on steps 3 and  <c:\temp\FortiClientSetup_7.2.12_x64.log> with the desired logs location.

6. For the Uninstall command  field, enter:

    msiexec /x "{<product code>}" /q

Note: Replace the <product code> with the FortiClient product code for the version being installed. The product code can be found in the FortiClient release notes, Product integration and support. 

7. From the Minimum operating system dropdown list, select Windows 10 1607, then select Next.

    

   

    

8. For the detection rule: select a manually configured detection rule, then select Add:

   1. From the rule type, select MSI.
   2. For the MSI product code, enter the <product code> from steps 4.e.2.
   3. For MSI product version check, select No., and then select Next.

       

9. Proceed to the Assignments tab. Select Add group.

    

10. Review the summary, then select Create.

     

Related documents:

Configuring the FortiClient application in Intune

Product integration and support

Installing FortiClient using the CLI