Skip to main content
hflorian
Explorer
July 10, 2025
Solved

FortiClient VPN conflicting with Microsoft Intune

  • July 10, 2025
  • 5 replies
  • 2447 views

In our environment, we use FortiClient VPN version 7.0.14.0585. We started researching into the possible benefits of Intune, so I configured enrollment, compliance polices, and a simple BitLocker requirement. Those are the only changes to our Entra/Intune environment that I made. Soon, I had rolled Intune out onto a few computers in our division. One of our employees notified us of issues connecting to the VPN, and we suspected Intune to be at fault. Sure enough, when Intune was removed the issue went away.

 

Screenshot is attached. When clicking yes, you are brought a blank page with a 300 second time out.Click to collapse FortiSIEM grouphubScreenshot 2025-07-10 085122.jpg

Best answer by btan

As @sharmar mentioned above, if you have Conditional Access Policy checking, you will have to use 'external browser', refer: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Implementing-device-based-Conditional-Access/ta-p/267878 

5 replies

sharmar
Staff & Editor
Staff & Editor
July 10, 2025

Hello @hflorian 

 

If you want to use intune compliance with saml, then make you use the external browser, I believe it doesn't support with internal browser. 

 

Thank you !! 

btan
Staff & Editor
btanAnswer
Staff & Editor
July 11, 2025

As @sharmar mentioned above, if you have Conditional Access Policy checking, you will have to use 'external browser', refer: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Implementing-device-based-Conditional-Access/ta-p/267878 

hflorian
hflorianAuthor
Explorer
July 11, 2025

Hey, thanks very much.  Looking into what I can do on the Intune side of things.  Our environment uses the free version of FortiClient.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!