Skip to main content
asmpro
New Member
May 29, 2018
Question

How to prevent users from adding/modifying/deleting VPN profiles in FortiClient for Window

  • May 29, 2018
  • 1 reply
  • 6461 views

We are using free FortiClient version 5.6.6 (no license and connection to FortiGate and no EMS bought), but would like to prevent users from adding/modifying/deleting VPN profiles.

Is that possible?

We know that settings can be locked via password, so locked configuration delivery should not be a problem.

We also know about allow_personal_vpns vpn option in the FortiClient XML config, but we assume this only comes into play, when EMS is bought?

 

Thank you.

 

Regards,

Uros

    1 reply

    Nicholas_Doropoulos
    New Member
    May 29, 2018

    Have a look at page 100 on the document below and let us know if that is what you are looking for:

     

    https://docs.fortinet.com...v1.2.2-admin-guide.pdf

    asmpro
    asmproAuthor
    New Member
    May 29, 2018
    Hi nick22d. Thank you for your reply, but in our case we do not use EMS. We are only using standalone (free) version of FortiClient for Windows. Is there any way ti configure it to disallow VPN profiles manipulation via either XML config or windows group policy? Regards, Uros
    vinceneil666
    New Member
    May 31, 2018

     allow_personal_vpns is probably the way to go. I have not tested it myself in that setup, but when EMS is involved that option will allow you to do other vpns than those allready configured.

     

    Have you tried this setting ? I would... Let me know how it goes  :)