FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
sdebnath
Staff
Staff
Article Id 407941
Description This article explains a situation in which the Free Android FortiClient VPN connects via IPsec without displaying a credential prompt for username and password.
Scope FortiClient.
Solution

When using a Free FortiClient on an Android device to connect through an IPsec VPN with IKEv2, the client connects directly without prompting for user credentials. (Refer to the screenshot below.)


7.4.3 V2 not asking for credentials.jpg

 

This behavior has been observed with the latest free FortiClient versions (e.g., Android v7.4.3.0185) when configured for IPsec Dial-up VPN with IKEv2.
Older versions, such as FortiClient v6.2.5, or IPsec VPNs configured with IKEv1, do not exhibit this behavior and correctly prompt for user authentication before establishing the connection (attached screenshot below).

22.jpg

 

This behavior is a limitation of the free Android version of FortiClient v7.4.3.0185. If an Android FortiClient VPN user connects to an IPsec VPN without being prompted for username and password credentials, the recommended solutions are:

  • Use IPsec VPN with IKEv1, or:

  • If IKEv2 is required, upgrade to FortiClient EMS licensing.

Contributors