Skip to main content
Riggie
Riggie
Explorer
October 15, 2024
Solved

FortiClient VPN Android (ChromeOS) JSON configuration

  • October 15, 2024
  • 4 replies
  • 3780 views

Hello all,

 

We have a few customers who use a FortiGate and are experimenting with deploying ChromeOS. Through ChromeOS you're able to push the FortiClient VPN Android version to the device. We would like to offer the right configuration for our customers without offering a tutorial/guide on how to create the correct configuration themselves. We noticed the FortiClient VPN Android version supports JSON files which can be used to add the settings automaticaly. Unfortunately we're unable to find the correct JSON script to do so. Where can we find the JSON file or how can we generate one? I would guess there is a template available somewhere!

 

Thank you in advance!

Best answer by Umer221

@Riggie,

I have internally consulted with FortiClient EMS team, and it looks like you need to find an alternate way if you are using a free version FortiClient.


 If you want to centrally manage and deploy FortiClient to android and make sure they receive the correct configs automatically, you will need a licensed version of FortiClient (offered via EMS version); otherwise you will need to find an alternate way.

4 replies

Umer221
Staff
Umer221
Staff
October 15, 2024

Hello Riggie,

Please go through the following thread and let us know if it provides any clue:
https://community.fortinet.com/t5/Support-Forum/JSON-for-deploying-a-Managed-configuration-Forticlient-VPN-to/m-p/336099



https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/473941/configuring-the-forticlient-web-filter-extension

Riggie
RiggieAuthor
Explorer
October 15, 2024

Hello @Umer221 

Thank you for your reply. I've found both topics before. The first one notices that their JSON configuration doesn't work (neither for us when we try it) and the second URL is for FortiClient EMS, it seems that this doesn't work for the Android FortiClient VPN version as it doesn't apply the settings.

Is there any documentation available that we can use?

Riggie
RiggieAuthor
Explorer
October 17, 2024

Hello everyone,

I was wondering if anyone found a solution or template to enroll this.

Best regards,

Umer221
Staff
Umer221
Staff
October 17, 2024

@Riggie ,

If I am understanding this correctly, you are looking to use an MDM software to deploy Forticlient Android app to the devices.

If this is correct, then try:
"In Intune, go to Apps > All apps > Android enrollment > Managed Google Play. Add and approve FortiClient (Android) from the Google Play store. On the Assignments tab, click Add group, then select the group that you created in step 4."
https://docs.fortinet.com/document/forticlient/7.4.0/intune-deployment-guide/786701/configuring-microsoft-intune-integration-to-allow-forticlient-android-to-connect-to-ems

 

If it still does not help, then I would suggest reach out to FortiClient EMS team as  long as you have a valid support for EMS team.

Riggie
RiggieAuthor
Explorer
October 17, 2024

@Umer221 ,

Thank you for your reply. I don't think you're understand my question correctly which could be because my wording, sorry! I will try to explain it again.

We want to enroll FortiClient VPN on our Chromebooks. We are able to push the FortiClient VPN client through the Google Enterprise portal. The only thing we're missing is the template to push the correct settings (Remote Gateway, Port, etc.). Because the Chromebook FortiClient application is an Android App, we can push a JSON configuration file which includes the correct settings. Please find the screenshot below of the configuration that we can add.

ChromeOS_Deployment.png

To summarize: we need the JSON template to sent the FortiClient VPN configuration (port, gateway, etc.) to our Chromebooks. We are able to push the FortiClient VPN application.

Umer221
Staff
Umer221Answer
Staff
October 18, 2024

@Riggie,

I have internally consulted with FortiClient EMS team, and it looks like you need to find an alternate way if you are using a free version FortiClient.


 If you want to centrally manage and deploy FortiClient to android and make sure they receive the correct configs automatically, you will need a licensed version of FortiClient (offered via EMS version); otherwise you will need to find an alternate way.

Riggie
RiggieAuthor
Explorer
October 22, 2024

Hello @Umer221 ,

Thank you for the update. It's not what I wanted to hear, but it is something we can work with together with our customer(s)! Thanks!

    Terms & ConditionsAccessibility statement