Skip to main content
cbraxton
cbraxton
New Member
August 6, 2019
Question

VPN client licensing (Forticlient)

  • August 6, 2019
  • 4 replies
  • 68570 views

We have a Fortigate 30E installed about a year and a half ago for VPN access. Is there currently a basic VPN client available that is free? We are not using any of the subscription or management services. However when installing, running, and connecting with the latest Forticlient version 6.x a message comes up that VPN access is only available free for 3 days after which a license must be purchased. (This was not the case with our earlier installations of Forticlient 5.x.)

 

I found a 2014 post here saying a free SSL VPN client is available through the Fortinet FTP site but that appears no longer to be the case, at least ftp.fortinet.com doesn't come up.  Is the free VPN-only client still available? This would primarily be for Windows, but a Mac version would be good to have as well if available.

    4 replies

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    August 6, 2019

    FortiClient itself has always been free for download:

    https://www.forticlient.com/downloads

    Currently they offer both 6.2 and 6.0. I never tried 6.2 yet.

    If you don't want anything else but VPN, you just need to choose "Only VPN" when you're asked while installing it.

    orani
    orani
    New Member
    August 7, 2019

    Toshi Esumi is right. For VPN connections there was always a free client. You only need a license if you want this client have more features like antivirus and some more.

    cbraxton
    cbraxtonAuthor
    New Member
    August 7, 2019

    I thought that was the case, but last weekend I was working on installing the VPN client on a Mac and it kept insisting that it would only work for 3 days without a license. We tried both the full client and VPN-only client. As a workaround we wound up adding a Cisco-style VPN to the Fortigate and using the built-in Mac VPN client.

     

    However yesterday I downloaded and installed the Windows VPN-only client from forticlient.com and did not have any issues. (Just an annoying banner saying to upgrade to the full version.) Not sure what was going on with the Mac.

    thelatinist
    thelatinist
    New Member
    August 15, 2019

    I'm having the same issue.  I installed the VPN-only client, but I'm receiving the following message on the login page:

     

    Please connect to Endpoint Management Server (EMS) for license activation. Unlicensed VPN access is available until Aug 17, 2019 11:40:48 PM

    Anyone have any ideas?

    cbraxton
    cbraxtonAuthor
    New Member
    August 26, 2019

    Was that with Windows, or a Mac? Maybe it's a problem with the Mac VPN client? As I mentioned the Windows version seems to be working as expected. I don't currently have a Mac available to retry the VPN client on that platform.

     

    smari
    smari
    New Member
    August 27, 2019

    I'm getting the same message on my mac, must be a recent change since I had 6.2 installed, no licence activation needed.

    Uninstalled the 6.2, installed 6.0 ( for some poc I'm doing ).

    Fetched the new client again from forticlient.com and now I'm getting the message :

    Please connect to Endpoint Management Server (EMS) for license activation. Unlicensed VPN access is available until Aug 30, 2019 10:45:32 .

    Guess I'm going back to 6.0.

    Sean_R
    Sean_R
    New Member
    April 27, 2020

    You want to look for the SSL-VPN client under downloads - it's sandwiched between the full client -the filename should be along the lines of FortiClientVPNSetup_6.2.6.0951

    FortiClient VPN

    Remote Access

    Y IPSec VPN Y SSL VPN N Technical Support

     

     

    sw2090
    SuperUser
    sw2090
    SuperUser
    April 28, 2020

    Hm FortiClient VPN 6.2 works fine here on several Macs so far. It should not want to connect to EMS. 

    Even the "normal" FortiClient shouldn't. EMS is only needed for customized FortiClient Versions. That is the only time you need a license for FortiClient.

    Maybe you downloaded such a version somewhere? Did you dl from the official site or the support portal?

    Mahindraholidays
    Mahindraholidays
    New Member
    July 14, 2020

    Hi,

    I have FortiGate 501E version V6.2.3 running SSL VPN in that deployed domain restriction, host integrity check and few addition features. user end currently using FortiClient 6.0.x, due to forticlient version vulnerability am going to upgrade the forticlient version.Post up-gradation (version 6.2.2 or higher)  the forticlient few features (domain restriction) are not working. Raised TAC support ticket ,they saying need to buy EMS licence, any one facing this kind of issue. Please suggest.

     

    Note: Please refer below statement.

    http://fortiguard.com/psirt/FG-IR-20-040.

    Threat Summary: FortiClient for Windows Insecure Temporary File vulnerability

    An Insecure Temporary File (CWE-377) vulnerability in FortiClient for Windows may allow a local user to gain elevated privileges via exhausting the pool of temporary file names combined with a symbolic link attack.

    Impact:

    Improper Access Control, Privilege Escalation

    What is Affected:

    FortiClient for Windows 6.2.1 and below

    How to Protect Yourself:

    Upgrade to FortiClient for Windows version 6.2.2 or above

     

    TechPros
    TechPros
    New Member
    August 5, 2020

    https://www.forticlient.com/

     

    v6.0

    ESL_RobertCole
    ESL_RobertCole
    New Member
    January 4, 2021

    I too was having the same problem.  Forticlient Download site has added three downloads were there was only one.

    The Top of the page download is now Fabric Agent with Endpoint Protection and Cloud Sandbox (this is a 3 day trial unless you have a licensed EMS). The Second download is the Forticlient EMS Server and the 3rd download is the Forticlient VPN that has no expiration.

    Terms & ConditionsAccessibility statement