Skip to main content
rhysperry111
rhysperry111
New Member
October 20, 2024
Question

"Remote Access" tab hidden on Linux client - FortiClient 7.4 ZTNA+EMS

  • October 20, 2024
  • 7 replies
  • 10365 views

I'm currently testing out the trial version of FortiClientEMS 7.4, however I've been unable to use it to for one of the key purposes we would need it for - to configure VPN connections on FortiClient devices.

 

The device in question is running Ubuntu 24.10 with a FortiClient installer generated by the EMS. The FortiClient successfully registers and continuously syncs with the EMS, but despite having SSLVPN enabled within the EMS, and a tunnel defined, the "Remote Access" tab just does not show up at all.

 

Interestingly enough, the "Remote Access" tab is there *before* the user connects to the EMS, but once connected it goes away. Within the settings of FortiClient it also has "Enable SSL VPN Feature" unchecked, but there is no way to change this while connected to the EMS.

 

Everything works perfectly fine on Windows clients (which would end up being a small minority if we were to fully deploy FortiClient).

 

I'm kinda at a loss here as none of the logs seems useful. Does anyone know where to start looking to get to the bottom of the issue?

7 replies

AEK
SuperUser
AEK
SuperUser
October 21, 2024

I tested the same version on Ubuntu and I confirm it works fine.

Check which policy is assigned to your client, and if it has been successfully pushed, and check if the policy uses a VPN profile which is enabled (inside the profile).

AEK
    rhysperry111
    rhysperry111Author
    New Member
    October 21, 2024

    The default policy (the only one I'm using) has SSLVPN enabled, and a predefined tunnel added. I still get the issue of the "Remote Access" tab disappearing while I'm connected to the EMS. There's absolutely no chance we could even consider deploying this as a solution unless we can get it working reliably

      AEK
      SuperUser
      AEK
      SuperUser
      October 21, 2024

      Go to System Settings > Feature Select, and ensure Remote Access and VPN are enabled.

      Did you make sure the policy has been successfully pushed to the client?

      If it doesn't help then try to share screenshots of the policy and remote access profile.

      AEK
        rhysperry111
        rhysperry111Author
        New Member
        October 21, 2024

        Still all seems to be good on the configuration side.

         

        EMS showing synced client infoEMS showing synced client infoFortiClient with missing "Remote Access"FortiClient with missing "Remote Access"Remote Access ProfileRemote Access ProfileEnabled Features in EMSEnabled Features in EMS

        aastardzhiev
        aastardzhiev
        Explorer II
        October 21, 2024

        Hi @rhysperry111 ,

         

        "Default" Remote Access profile is hidden. This means it is enabled, but hidden from the GUI for the enduser.

        You can make it visible by editing the profile -> click on "Advance" on the top right corner -> click on the eye next to the "enable" toggle button.
        forticlient-enable-ra-view.png

         

        Wait for the next telemetry for the client to sync the config with the EMS.

          rhysperry111
          rhysperry111Author
          New Member
          October 21, 2024

          The access profile is enabled (and was before)

          Remote Access is viewableRemote Access is viewable

          AEK
          SuperUser
          AEK
          SuperUser
          October 21, 2024

          So can you try create another remote access profile and assign it to the policy.

          AEK
            rhysperry111
            rhysperry111Author
            New Member
            October 21, 2024

            Annoyingly even when on a non-default profile+policy I'm still unable to get "Remote Access" to show. It works on Windows clients though :\

             

            Thanks for the suggestion anyway

            funkylicious
            SuperUser
            funkylicious
            SuperUser
            October 21, 2024

            Hi,
            Out of curiosity, do you use different profiles for clients on-fabric and off-fabric?

            "jack of all trades, master of none"
              AEK
              SuperUser
              AEK
              SuperUser
              October 21, 2024

              I saw different kinds of issues on clients 7.4.0 that was resolved by uninstalling, cleanup/purge then reinstalling the client.

              Can try the same?

              AEK
                rhysperry111
                rhysperry111Author
                New Member
                October 21, 2024

                Just reinstalled... the issue still seems to be happening. Times like this make me with things like FortiClient were open source so I could dig through and see at what point between the EMS and client the "Remote Access" settings gets flipped.

                AEK
                SuperUser
                AEK
                SuperUser
                October 23, 2024

                Try open a ticket in the meantime. TAC helped me a lot with many issues on FCT, as they will be able to have remote sessions on your EMS.

                AEK
                  rhysperry111
                  rhysperry111Author
                  New Member
                  October 28, 2024

                  Is there any way I can get some official support from Fortinet on this? As mentioned before it doesn't let me create tickets while on a trial license, however there's absolutely no way I'd pay for a full license until I knew this issue could be resolved.

                  Terms & ConditionsAccessibility statement