FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
kjiye
Staff & Editor
Staff & Editor
Article Id 261591
Description

This article describes the deprecation of the FortiClient Configurator tool, which previously allowed administrators to generate a customized installer for the free FortiClient VPN software.

Scope FortiClient 6.2 and later.
Solution

As of FortiClient 6.2 and later, the FortiClient Configurator tools has been deprecated. This means that customized installation packages may only be generated for FortiClient endpoints that will be managed by EMS, as discussed here: EMS Admin Guide - FortiClient Installer.

 

Note that the legacy FortiClient Configurator tool may still be downloaded from the Fortinet Developer Network website, though it is only capable of producing customized installers for FortiClient VPN 6.0.10 and earlier (released September 21st, 2020): FNDN - FortiClient Configurator.

 

With that in mind, consider purchasing a FortiClient EMS or EMS Cloud license to enable central management/configuration of FortiClient endpoints, as well as the deployment of customized installer packages. Note that a free trial license is available for on-prem EMS and can be used to manage up to three endpoints, though it comes with no technical support and may not be used for production purposes. Consider contacting Fortinet Sales to request a full evaluation license, as that allows for technical support during the evaluation period: EMS Admin Guide - Free Trial License.

 

FortiSASE also includes similar management capabilities in its service offerings, combining FortiGate-based remote-access VPN and security inspection with FortiClient EMS central management.

 

For administrators who only require VPN functionality and are managing a small number of users, an alternative method for deploying a standardized configuration could be as follows:

 

  1. Configure an initial FortiClient VPN endpoint with the required VPN tunnel configurations.
  2. Back up the FortiClient configuration to a text file.
  3. Copy and restore the configuration backup to each subsequent FortiClient VPN endpoint.

 

Note that this method would require admins to manually update each endpoint in the event of a change to VPN settings.