FortiClient on RDS Server

[OlliWW]

Hi,

I have a Windows Server 2022 RDS Server (Terminalserver Services).

I want to install FortiClient as AV / EDR Client. I've created an installer and invitation link for all the AV Modules excluding: VPN and Application Firewall.

But the Forticlient does not seem to work well in multiuser envoirements. If a new user loggs into the terminalserver and authenticates with forticlient, another user will logged out. the forticlient also gets out of sync with forticlient ems cloud.

Is there any best practise on how to deploy forticlient to a rds server?

Thank you for your help 

[Jean-Philippe_P]

Hello OlliWW, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

[Jean-Philippe_P]

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

[OlliWW]

Hello,
Thank you.

[Jean-Philippe_P]

Hello again OlliWW,

I found this solution. Can you tell me if it helps, please?

When deploying FortiClient on a Windows Server 2022 RDS (Remote Desktop Services) environment, there are specific considerations to ensure it functions correctly in a multi-user setup. Here are some best practices:

1. Module Selection: Ensure that the Application Firewall module is not installed, as it is not supported on Windows Server OS and can cause performance issues.
   
   
2. User Session Management: FortiClient is primarily designed for single-user environments. In multi-user environments like RDS, conflicts can occur when multiple users attempt to authenticate simultaneously. This can lead to issues such as users being logged out or sessions getting out of sync.
   
   
3. Configuration:
   - Consider configuring FortiClient to operate in a mode that minimizes user interaction. This can help reduce conflicts between user sessions.
   - Ensure that each user session is isolated and that FortiClient settings are applied per user session.
   
   
4. Testing: Before full deployment, test the FortiClient installation in a controlled environment to identify any potential issues with user sessions and EMS synchronization.
   
   
5. Consult Documentation: Refer to Fortinet's official documentation for any specific guidelines or updates related to deploying FortiClient in RDS environments.
   
   
6. Support: If issues persist, consider reaching out to Fortinet support for assistance tailored to your specific environment and configuration.

By following these practices, you can improve the functionality of FortiClient in a multi-user RDS environment.

[OlliWW]

Hi,

Thank you for your reply. 

Can you specify how to:

"Ensure that each user session is isolated and that FortiClient settings are applied per user session."

[Jean-Philippe_P]

Hey again,

I found this solution:

To ensure that each user session is isolated and that FortiClient settings are applied per user session on a Windows Server 2022 Remote Desktop Services (RDS) Server, you can follow these general steps:

1. User Profile Management: Utilize roaming profiles or folder redirection to maintain user-specific settings. This ensures that each user's FortiClient configuration is applied correctly when they log into their session.
   
   

2. Install FortiClient per User: When installing FortiClient, ensure that it is installed in a manner that supports per-user configurations. This typically involves running the installer with user-specific options or using Group Policy to deploy the application.
   
   

3. Group Policy Objects (GPO):

   • Use GPOs to configure FortiClient settings for individual user sessions. You can create a GPO that applies specific FortiClient settings and link it to the organizational unit (OU) containing your user accounts.
   • Ensure that the GPO is set to apply to user configuration rather than computer configuration to maintain user-specific settings.
     
     

4. FortiClient Configuration Files: If FortiClient supports configuration files, you can create user-specific configuration files that are loaded at the start of each session. Place these files in a user-specific directory that FortiClient can access.
   
   

5. Session Isolation: RDS inherently provides session isolation, so each user's session operates independently. Ensure that your RDS settings are configured to maintain this isolation, including proper user permissions and session management.
   
   

6. Testing: After configuration, test with multiple users to ensure that settings are applied correctly and that there is no crossover between user sessions.
   
   

7. Documentation and Support: Refer to the FortiClient documentation for specific settings and features related to user session management. Additionally, consult Microsoft’s documentation on configuring RDS for best practices.
   
   

For further assistance or specific configurations, you may want to check the official documentation or support channels for FortiClient and Windows Server.