Skip to main content
PeterK
PeterK
Visitor III
October 8, 2020
Question

Anyone set up Forticlient in conjunction with AOVPN. Otherwise experience with AOVPN?

  • October 8, 2020
  • 2 replies
  • 6287 views

Hi

 

We seem to have huge stability issues with AOVPN with it intermittently working on devices.  A Richard Hicks video on setting this up said you could use Forticlient instead of a Windows server to set this up but provided no explanation of how to do this or what the endpoint it.  I would assume a Forticlient has to be used with the Firewall as the endpoint unless it can be used with a 3rd Party VPN endpoint?  If you use it to VPN to the Firewall, not sure how you would merge this with AOVPN as you already have a VPN.

 

Has anyone else set up AOVPN and what is your experience of it?

 

Kind Regards

 

Peter

    2 replies

    boneyard
    boneyard
    Valued Contributor
    October 10, 2020

    i had to do a quick google as the acronym didnt directly register for me, so i assume you mean Windows 10 Always On VPN (AOVPN)?

     

    you can indeed replace the default Windows 10 VPN client with the FortiClient and have it connect before Windows login to the FortiGate.

     

    here are some KBs on this

     

    https://kb.fortinet.com/kb/documentLink.do?externalID=FD36383

     

    https://help.fortinet.com/fclient/olh/5-6-1/FortiClient-5.6-Admin/1200_Remote%20Access/0805_Activate%20VPN%20before%20Windows%20logon.htm

     

    from FortiGateOS 6.2 this requires FortiClientEMS.

    Yurisk
    SuperUser
    Yurisk
    SuperUser
    October 11, 2020

    Ha, I was also intrigued by the "new" technology AOVPN, but it is indeed Always On VPN. Fortigate/Forticlient-wise it is just a matter of 1 line of configuration on Fortigate to enable Forticlient to use this feature. As already mentioned starting Forticlient 6.2 Always On is NOT included in the free VPN version of it, only 6.0.9 still works for free, then EMS.

     

    Have you tried asking the author about his explanation (whatever it may be) - I see on his blog he has been answering posts on this topic for few years already, what a patience :) ?

    https://directaccess.richardhicks.com/2017/12/11/always-on-vpn-windows-10-device-tunnel-step-by-step-configuration-using-powershell/ 

     

    yurisk.info - all things Fortinet blog, no ads
    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!