Skip to main content
caos
New Member
July 20, 2021
Question

Forticlient for Linux can only connect to ONE MFA-enabled firewall

  • July 20, 2021
  • 0 replies
  • 2074 views

I'm running Forticlient 7.0.0.0018 on Ubuntu 20.04. 

 

I've configured it to connect to my company's Fortigate 100F using SAML, and it works well. I was surprised to see that it appeared to cache both username and password as I only needed to enter those first time I connected. It doesn't even prompt me for a one-time SMS code. The Windows version requires me to enter both username and password plus SMS code every time I connect. Not top security but I must confess it's quite convenient when working from home. 

 

Now one of my customers has enabled SAML on their 100F as well. When I try to connect to their firewall, Forticlient still tries to connect using my company credentials, even though I specified what username to use when I configured the new client VPN. 

 

I renamed the ~/.config/FortiClient/Cookies file and that made it possible to enter all credentials and connect to the client's firewall -- but now Forticlient tries to use those credentials for my company's VPN as well!

 

Everything works well in the Windows client, so what can I do to make the Linux client work the same way?

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!