Technical Note: How to partially modify FortiClient configuration via XML

[cfirpo_FTNT]

Description

This article explains how a minor change may to be pushed to FortiClient hosts.

Scope

Pushing configuration to FortiClient via advanced profile.

Solution

FortiGate will allow this by enabling the advanced FortiClient profile.

Once enabled, when navigating to Security profiles > FortiClient Profiles, the advanced configuration dialogue box will be displayed and provides an option to enter the code to be pushed.

config endpoint-control profile
edit <profile_name>
config forticlient-winmac-settings
set forticlient-advanced-cfg enable
end
end

The following is a sample piece of FortiClient XML to be modified, notice that the partial configuration flag is enabled.

<?xml version="1.0" encoding="UTF-8" ?>
<forticlient_configuration>
<partial_configuration>1</partial_configuration>
<system>
<ui>
<ads>0</ads>
<default_tab>VPN</default_tab>
<flashing_system_tray_icon>0</flashing_system_tray_icon>
<hide_system_tray_icon>0</hide_system_tray_icon>
<suppress_admin_prompt>0</suppress_admin_prompt>
<culture_code>os-default</culture_code>
</ui>
<update>
<use_custom_server>0</use_custom_server>
<port>80</port>
<timeout>60</timeout>
<failoverport>8000</failoverport>
<fail_over_to_fdn>1</fail_over_to_fdn>
<scheduled_update>
<enabled>0</enabled>
<type>interval</type>
<daily_at>03:00</daily_at>
<update_interval_in_hours>3</update_interval_in_hours>
</scheduled_update>
</update>
</system>
</forticlient_configuration>