Skip to main content
FortiKoala
Staff
Staff
November 28, 2017

Technical Tip: Disable Windows internet connectivity check for a dial-up VPN on FortiClient

  • April 24, 2026 at 11:47 AM
  • 0 replies
  • 8841 views

Description


This article describes that in a closed environment, i.e. a network with no internet access, FortiClient will not connect to dial-up because it uses the Windows internet check to verify network connectivity.

Scope


FortiClient.

Solution

 

Allow auto-connect dial-up VPN to run after a reboot of the Windows Client in a closed environment.

Configuration:
In the Windows FortiClient:

  • Backup the FortiClient Configuration.
  • Edit the FortiClient configuration file. There will be a new xml option <disable_internet_check> under <VPN>.
  • Modify 0 to 1 then restore the xml configuration file again.

 

<vpn>
<options>
...
<disable_internet_check>0</disable_internet_check>
</options>


Note:
This feature refers to the Windows Network Connection Status Indicator (NCSI). Even in a network with internet access, NCSI function probes may fail if the destination is restricted. The option above is also valid in such cases.

 

kcs_internet_connectivity.png

 

Related documents:

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT