Skip to main content
Weatherlights
New Member
September 12, 2018
Question

FortiClient 6 won't auto connect while 5 would

  • September 12, 2018
  • 1 reply
  • 5959 views

I am currently working with the new FortiClient 6 and I tried to use the same configuration file as in version 5. We configured auto connect based on a certificate with version 5 and it always auto connected fine. Now with version 6 the client does not autoconnect anylonger instead the GUI shows up and wants me to click connect.

This is my configuration (basically):

<forticlient_configuration>
<vpn>
        <options>
            <current_connection_name>company AON</current_connection_name>
            <current_connection_type>ssl</current_connection_type>
            <autoconnect_tunnel>company AON</autoconnect_tunnel>
            <autoconnect_only_when_offnet>0</autoconnect_only_when_offnet>
            <keep_running_max_tries>30</keep_running_max_tries>
            <disable_internet_check>0</disable_internet_check>
            <save_password>1</save_password>
            <minimize_window_on_connect>0</minimize_window_on_connect>
            <allow_personal_vpns>0</allow_personal_vpns>
            <disable_connect_disconnect>0</disable_connect_disconnect>
            <show_vpn_before_logon>1</show_vpn_before_logon>
            <use_windows_credentials>1</use_windows_credentials>
            <use_legacy_vpn_before_logon>0</use_legacy_vpn_before_logon>
            <show_negotiation_wnd>0</show_negotiation_wnd>
            <vendor_id />
        </options>
        <sslvpn>
            <options>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>0</prefer_sslvpn_dns>
                <dnscache_service_control>0</dnscache_service_control>
                <use_legacy_ssl_adapter>0</use_legacy_ssl_adapter>
                <preferred_dtls_tunnel>0</preferred_dtls_tunnel>
                <no_dhcp_server_route>0</no_dhcp_server_route>
                <no_dns_registration>0</no_dns_registration>
                <disallow_invalid_server_certificate>1</disallow_invalid_server_certificate>
            </options>
            <connections>
                <connection>
                    <name>company AON</name>
                    <server>vpn.company.com:443</server>
                    <username />
                    <single_user_mode>0</single_user_mode>
                    <ui>
                        <show_remember_password>0</show_remember_password>
                        <show_alwaysup>0</show_alwaysup>
                        <show_autoconnect>0</show_autoconnect>
                    </ui>
                    <password />
                    <certificate>
                        <common_name>
                            <match_type>
                                <![CDATA[wildcard]]>
                            </match_type>
                            <pattern>
                                <![CDATA
  • ]>
                                </pattern>
                            </common_name>
                            <issuer>
                                <match_type>
                                    <![CDATA[simple]]>
                                </match_type>
                                <pattern>
                                    <![CDATA[company CA]]>
                                </pattern>
                            </issuer>
                        </certificate>
                        <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                        <prompt_certificate>0</prompt_certificate>
                        <prompt_username>0</prompt_username>
                        <fgt>1</fgt>
                        <keep_running>1</keep_running>
                        <on_connect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_connect>
                        <on_disconnect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_disconnect>
                    </connection>
                    <connection>
                        <name>company SSL-VPN</name>
                        <server>vpn.company.com:443</server>
                        <single_user_mode>0</single_user_mode>
                        <ui>
                            <show_remember_password>0</show_remember_password>
                            <show_alwaysup>0</show_alwaysup>
                            <show_autoconnect>0</show_autoconnect>
                        </ui>
                        <password />
                        <prompt_username>1</prompt_username>
                        <fgt>1</fgt>
                        <keep_running>1</keep_running>
                        <on_connect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_connect>
                        <on_disconnect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_disconnect>
                    </connection>
                </connections>
            </sslvpn>
        </vpn>
    </forticlient_configuration>
  •  

    And this is what I get on startup instead of the autoconnect: [link=https://forum.fortinet.com/post.aspx?forumID=5] Sample.jpg [/link][strike][/strike]

    1 reply

    Weatherlights
    New Member
    September 12, 2018

    Could this be known issue 510735?

    6.0.2RC1 Fails to connect to VPN from Task tray with usercert authentication it prompts for certificate

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!