Skip to main content
JayL
New Member
September 2, 2019
Question

Where to set script on Fortigate firewall for SSL VPN to map network drive on connect?

  • September 2, 2019
  • 8 replies
  • 10662 views

I know I can export the Forticlient configuration, edit it and then restore it that way. But when you have a lot of VPN users that's just not practical. Is there a way that when users connect to the Fortigate firewall using Forticlient VPN, the firewall tells the client to run a script like mapping network drive etc? I did quite some google search but couldn't find the right answer. Thanks.

    8 replies

    JayL
    JayLAuthor
    New Member
    September 12, 2019

    No suggestions after a week. I guess it's a no then. Hope they can add this feature in the future.

    Dave_Hall
    New Member
    September 12, 2019

    A google search seems to imply the following link....

     

    Mapping a network drive after tunnel connection

    The script maps a network drive and copies some files after the tunnel is connected.

    <on_connect>

    <script>

    <os>windows</os>

    <script>

    <script>

    <![CDATA[

    net use x: \\192.168.10.3\ftpshare /user:Honey Boo Boo

    md c:\test

    copy x:\PDF\*.* c:\test

    ]]>

    </script>

    </script>

    </script>

    </on_connect>

     

    Also check out the full XML Reference scripting section.

     

    YMMV.

     

    JayL
    JayLAuthor
    New Member
    September 13, 2019

    Dave Hall wrote:

    A google search seems to imply the following link....

     

    Mapping a network drive after tunnel connection

    The script maps a network drive and copies some files after the tunnel is connected.

    <on_connect><script><os>windows</os><script><script><![CDATA[net use x: \\192.168.10.3\ftpshare /user:Honey Boo Boomd c:\testcopy x:\PDF\*.* c:\test]]></script></script></script></on_connect> 

    Also check out the full XML Reference scripting section.

     

    YMMV.

     

    Hi Dave, thanks for the reply. But my question is really how to deploy the scripts centrally when you have hundreds of clients. I already  know how to make the script, I also know how to do it on each individual client. But I want to find a way that you set up the script on the firewall and the client gets the script when they connect.

     

    Found an answer in the other thread someone mentioned the FortiClient Configurator Tool  which can make a customized MSI installation file. It will archive what I want to do although not ideal, plus it requires license which means more cost.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT