FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
jie
Staff
Staff
Article Id 399219
Description This article describes how to prevent FortiClient from receiving the wrong on/off fabric tag information before it auto-connects to the VPN
Scope FortiClient.
Solution

On Windows startup, the network is not immediately available, and the network state will likely be offline, because servers are unreachable. 

 

FortiClient has a tag <disable_internet_check>; if it is set to 1, then it repeats connection attempts without checking the network status. If the network suddenly becomes available, then FortiClient might just connect a split second before fabric state updates to the onnet.

 

If <disable_internet_check> is set to 0, then FortiClient will not try repeatedly. Instead, it waits until the network becomes available, then continues the VPN connection. This usually would not cause any problem.

 

To modify this tag, go to EMS -> Endpoint Profiles, assign the VPN profile,  XML edit the tag <disable_internet_check>, change the value from the default '1' to '0'.

 

aaa.PNG

Contributors