FortiClient VPN Android (ChromeOS) JSON configuration

[Riggie]

Hello all,

We have a few customers who use a FortiGate and are experimenting with deploying ChromeOS. Through ChromeOS you're able to push the FortiClient VPN Android version to the device. We would like to offer the right configuration for our customers without offering a tutorial/guide on how to create the correct configuration themselves. We noticed the FortiClient VPN Android version supports JSON files which can be used to add the settings automaticaly. Unfortunately we're unable to find the correct JSON script to do so. Where can we find the JSON file or how can we generate one? I would guess there is a template available somewhere!

Thank you in advance!

[Umer221]

Hello Riggie,

Please go through the following thread and let us know if it provides any clue:
https://community.fortinet.com/t5/Support-Forum/JSON-for-deploying-a-Managed-configuration-Forticlie...

https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/473941/configuring-the...

[Riggie]

Hello @Umer221 

Thank you for your reply. I've found both topics before. The first one notices that their JSON configuration doesn't work (neither for us when we try it) and the second URL is for FortiClient EMS, it seems that this doesn't work for the Android FortiClient VPN version as it doesn't apply the settings.

Is there any documentation available that we can use?

[Riggie]

Hello everyone,

I was wondering if anyone found a solution or template to enroll this.

Best regards,

[Umer221]

@Riggie ,

If I am understanding this correctly, you are looking to use an MDM software to deploy Forticlient Android app to the devices.

If this is correct, then try:
"In Intune, go to Apps > All apps > Android enrollment > Managed Google Play. Add and approve FortiClient (Android) from the Google Play store. On the Assignments tab, click Add group, then select the group that you created in step 4."
https://docs.fortinet.com/document/forticlient/7.4.0/intune-deployment-guide/786701/configuring-micr...

If it still does not help, then I would suggest reach out to FortiClient EMS team as  long as you have a valid support for EMS team.

[Riggie]

@Umer221 ,

Thank you for your reply. I don't think you're understand my question correctly which could be because my wording, sorry! I will try to explain it again.

We want to enroll FortiClient VPN on our Chromebooks. We are able to push the FortiClient VPN client through the Google Enterprise portal. The only thing we're missing is the template to push the correct settings (Remote Gateway, Port, etc.). Because the Chromebook FortiClient application is an Android App, we can push a JSON configuration file which includes the correct settings. Please find the screenshot below of the configuration that we can add.

To summarize: we need the JSON template to sent the FortiClient VPN configuration (port, gateway, etc.) to our Chromebooks. We are able to push the FortiClient VPN application.

[Umer221 · Accepted solution]

@Riggie,

I have internally consulted with FortiClient EMS team, and it looks like you need to find an alternate way if you are using a free version FortiClient.

 If you want to centrally manage and deploy FortiClient to android and make sure they receive the correct configs automatically, you will need a licensed version of FortiClient (offered via EMS version); otherwise you will need to find an alternate way.

[Riggie]

Hello @Umer221 ,

Thank you for the update. It's not what I wanted to hear, but it is something we can work with together with our customer(s)! Thanks!