Logging onto a domain via Forticlient

Forum|Forum|20 years ago
September 29, 2005
7 replies
4342 views

Hi all, I have a Fortigate 100 with Forticlient (latest version). I have setup a fairly basic client to site VPN and once a user is logged onto their machine locally, they can then fire up the Forticlient and create a successful tunnel. HOWEVER, knowing on a Windows machine before logging on, Fortinet have created a little VPN button to connect the VPN before logging on, why is the user not then able to logon to the domain - thought that was what it was for? Does anyone have any experience on whether this is possible and how it is achieved? Many thanks, Richard

vanc

New Member

The " Startup Tunnel before Windows Logon" feature is for users on the go. If they use a dialup or whatever internet connections outside their corporate network, they can use this feature to establish a tunnel to their corporate gateway first, then log on to domains.

A

Anonymous_UserAuthor

Contributor III

Thanks for that, however I' m already aware of the button - it' s the fact that it doesn' t logon to the domain after clicking that button which is my issue. No login scripts are run and the client loads a local profile. If you know what I need to do so that the client does logon properly, it would be much appreciated. I' ve got an any any internal->external encrpyt rule running as specified in some Fortinet documentation, not sure what else to do! Cheers, Rich

vanc

New Member

I think you may need to choose " Acquire Virtual IP" to get it work. You can use manual IP. DHCP over IPSec is difficult to configure on server side.

A

Anonymous_UserAuthor

Contributor III

It seems we' ve now got it to work by including a DNS suffix and adding an LMHOSTS entry for the server.... Thanks for the help. Regards, Richard

A

Anonymous_UserAuthor

Contributor III

Richard, Where did you include a DNS suffix? thanks in advance, Eric

A