FortiClient 5.2.1 - How disable ads, links, prompts to install other features, etc.?

[obrienw]

We moved to FC 5.2.1 for pre-logon SSL-VPN after the debacle of the 4.5.3 updater trying to automatically install an entire security suite on top of our existing one.  Someone eventually dug up a registry hack to stop that.  And now I find out that 5.2.1 is still prompting users to add on the additional security features after explicitly installing VPN Components only.

How do I turn that off???

At no point in time should a regular user in an enterprise environment ever be prompted or offered the option of changing the security software on their computer; that's strictly an administrative function.  What's so hard about this?  It's completely baffling to me why I have to put so much work into preventing FortiClient from pwning my computers.

[jvanderzee · Accepted solution]

I have tried to work with support to see if these ads can be removed without needing to register to a Fortigate.  No other VPN client I know has this ad annoyance.  I've given feedback to Fortinet on this topic and have not heard a response.  If you use the FortiClient 5.2.0 (Download from your support login), backup the config and restore with the <ads>0</ads> tag altered (From 1 to 0) it will remove the ads for you.  For Forticlient 5.2.1 and 5.2.2 this backup and restore of the config to remove the ads does not work anymore.  I'm guessing this is some sales ploy but I find it absurd for users needing only the VPN functionality from Fortinet.  This has already annoyed some of my clients and instead leads me to look at other NGFW vendors rather than purchase the products forced in your face with every VPN connection.

[bartman10]

I can't agree more.. Come on FortiNet.. how freeken tacky.. 3 banner bars of adds for  your stuff in my clients VPN... dood.. really... tell the marketing people to chill! 

And Fortinets answer is just like a spammer (well you can opt out) by screwing with these registry keys and values in the XML file... that oh.. by the way you have to do on every client and there is no default way to disable it unless you license the full FortiClient... 

Thanks bro!

[jvanderzee · Accepted solution]

I have tried to work with support to see if these ads can be removed without needing to register to a Fortigate.  No other VPN client I know has this ad annoyance.  I've given feedback to Fortinet on this topic and have not heard a response.  If you use the FortiClient 5.2.0 (Download from your support login), backup the config and restore with the <ads>0</ads> tag altered (From 1 to 0) it will remove the ads for you.  For Forticlient 5.2.1 and 5.2.2 this backup and restore of the config to remove the ads does not work anymore.  I'm guessing this is some sales ploy but I find it absurd for users needing only the VPN functionality from Fortinet.  This has already annoyed some of my clients and instead leads me to look at other NGFW vendors rather than purchase the products forced in your face with every VPN connection.

[dmux]

jvanderzee wrote:

If you use the FortiClient 5.2.0 (Download from your support login), backup the config and restore with the <ads>0</ads> tag altered (From 1 to 0) it will remove the ads for you.

jvanderzee, did adding the <ads>0</ads> to your config actually work for 5.2.0? I haven't been able to get it to work (on OSX). One thing I noticed was that when backing up a 5.2.2 or 5.2.1 configuration the <ads> tag was already present in the config UI section, but set to 1. When backing up 5.2.0, there was no <ads> tag and I needed to add it manually. Like I said though, I haven't been able to disable the ads in any of the versions. Did you have any luck?

[jvanderzee]

dmux wrote:

jvanderzee wrote:

If you use the FortiClient 5.2.0 (Download from your support login), backup the config and restore with the <ads>0</ads> tag altered (From 1 to 0) it will remove the ads for you.

jvanderzee, did adding the <ads>0</ads> to your config actually work for 5.2.0? I haven't been able to get it to work (on OSX). One thing I noticed was that when backing up a 5.2.2 or 5.2.1 configuration the <ads> tag was already present in the config UI section, but set to 1. When backing up 5.2.0, there was no <ads> tag and I needed to add it manually. Like I said though, I haven't been able to disable the ads in any of the versions. Did you have any luck?

I did the 0 ads setting on the Windows version.  I have not tried it on OSX.  I would suggest contacting support and seeing if they know which version was the last one to support the ads removal tag.  Alternative solutions would be use one of the 10 included licenses with your FortiGate to register the client or utilize the lightweight SSL VPN client accessed via the portal.  That client has no ads.  There is also a way to package the installations but I believe an endpoint license is needed before that is allowed.

[dmux]

jvanderzee wrote:

I did the 0 ads setting on the Windows version.  I have not tried it on OSX.  I would suggest contacting support and seeing if they know which version was the last one to support the ads removal tag.  Alternative solutions would be use one of the 10 included licenses with your FortiGate to register the client or utilize the lightweight SSL VPN client accessed via the portal.  That client has no ads.  There is also a way to package the installations but I believe an endpoint license is needed before that is allowed.

I do have a support ticket open, just thought I may expedite the process by gathering as much info as possible. Where would I go about finding the license for the 10 clients? I commented on a thread in the FortiClient forum asking about the SSLVPN client for OSX. The only one I am able to find is the "OnlineInstaller" version. I'd prefer the offline installer if possible.

Thanks for the feedback, I appreciate it.

Edit: Found the "simple" (no ads or other components) SSL-VPN client for OSX. See my reply in another thread here: https://forum.fortinet.com/FindPost/119171.

[bartman10]

I think I understand what they are trying to do... The Free FortiClient with antivirus and all that jazz should get the adds.. But when we are deploying FortiClient in VPN only to connect to a Fortnet device.. there should be no adds.. 

Think about it Fortinet.. you are pushing 3 banners of adds to my VPN users who don't know a UTM from a SQL... your message is falling on deaf ears.. 

Combine that with the fact we ALREADY have a Forti device cause that's why we are using the product to begin with and it's a little odd...

You still really need to fix the VPN only FortiClient so when users download it from the VPN portal site they ONLY have the option to install the VPN client. Many of my users keep blowing up their computer cause they install the full client with Symantec AV installed...

I'll make it really simple for you Fortinet... This is what we as admins want.. We want "FortiClient VPN" to work EXACTLY the way Cisco Anyconnect works. That is.. it just works.. A user loggs into the web interface, installs Anyconnect, all the VPN settings are set for them.. gateway, ports, start before login.. all of it.. And no adds!

That is what we want.... "FortiAnyconnect"

If you would like a demo of how Cisco Anyconnect works feel free to contact me and I can set you up with a trial account on my 5510.. or I could even loan out a 5505 for you to test.

[Christopher_McMullan]

What channel did you use to provide Fortinet with your feedback? Forums and support tickets don't have nearly the same kind of traction as speaking with your Systems Engineer or local account rep about your concerns.

If you propose the change you want as a New Feature Request, the SE can start building a business case for why FortiClient should be modified in time for a specific future release.

Here's my suggestion:

-open a ticket with Fortinet TAC

-mention that the purpose of the ticket is to explore a New Feature Request

-detail the problem, as you see it

-detail the solution you would like to see implemented

The TAC engineer assigned will validate any required technical information, verify who your SE is, and reach out to them about formally submitting the New Feature Request.

[jvanderzee]

I have opened a ticket but the focus was not done in the New Feature request fashion, it was to remove the ads.  I will communicate with my SE directly and see what can be done.  Thanks for the suggestions.

[bartman10]

Honestly Christopher that is a totally bad and "not my department" attitude.

I really can't tell you how sad I felt the first time I heard someone from Fortinet say something like this.. because that attitude is really telling about how the company is run, how the company values it's customers and how driven the company is to deliver the product the customer wants.

The companies people hate to work deal with all seem to have this exact same policy. "You need to tell your rep..." "You need to call someone else and tell them.. they don't listen to my department..." "You.. You.. You..." Always what the customer needs to do.

If the customer is complaining about something they don't like with the product.. is it really a great idea to have them go even further out of their way, to take even more of their time in order to inform the people who live in the crystal palace?

By the way.. I don't exactly get the feeling my rep is really paying attention when I do bring things up with my rep.. I think you guys have a bit of a disconnect here between the customer, the rep, and the developers up in the crystal palace. 

Oh BTW... how do you know the reps and SE's are even bringing this up to ANYONE!? There is not ticket or tracking number.. the guy just says "ya.. ok.. I'll look into it" and pfft.. that's it.. 

I just did tell you... Jvander just did tell you.. YOU are the one that needs to bring this up with development. You are the agent of the company. 

We are the customers, we are posting our feedback and suggestions right here in Fortinets forum for crying out loud! Don't you think it might be a good idea for the managers and such to maybe take a look in here and see what the customers are saying? What we are asking for? 

These are the same out of touch managers who are probably, right now, in a meeting with marketing managers talking about a new marketing campaign to get better customer feedback and metrics.. they just don't get it.. and it's so painfully obvious. 

The best companies are more than happy to take customer feedback seriously no matter how or where it's coming from. Just yesterday I was talking to someone in the finance department about updating my billing.. and in conversation I mentioned something I did not like in the user interface... This FINANCE guy proceeded to open a suggestion ticket, emailed me the ticket number.. AND called me back the next day to ensure I received it. 

The truly sad part is I know you have no idea what I'm talking about... As you read this all you are thinking about is how I am wrong and you are right.. This way of thinking is from the 50's.. it's a cancer in a company that I have never seen cured.. 

Does Fortinet believe this is good customer service? Do they believe this is making their product better? Do you think myself and Jvan feel like we are being taken seriously and are appreciated as customers? I'll give you a hint.. no..