Forticlient VPN Window opening by itself

[CyberUser]

Good afternoon,

We have a problem with Forticlient VPN. The client is configured with ZTNA and EMS. Every time we suspend the notebook and turn it on again, the Forticlient window opens. We have tried reinstalling and installing older versions, but without success. Has anyone experienced something similar and would know what could be the reason?

Thank you in advance.

[dbu]

Hi @CyberUser , 

Maybe you need to verify the windows startup list and see if your FortiClient is enabled to run owhen Windows stars.

[CyberUser]

We cant disable the run when windows starts because we need ZTNA and EMS services.

[AEK]

Hi

I think you mean FortiClient, not FortiClient VPN, right?

As far as I remember this behaviour is managed from EMS policy side. It can be enabled or disabled by EMS admin only.

[CyberUser]

We cant disable the run when windows starts because we need ZTNA and EMS services. Thats is it.

[hbac]

Hi @CyberUser,

Can you please clarify? First, you mentioned that the client is configured with ZTNA and EMS. But after, you mentioned that you need ZTNA and EMS services? 

As AEK suggested, this can only be achieve on the EMS. 

Regards, 

[Zimp]

@hbac Do you know which setting needs to be enabled or disabled in EMS to prevent the VPN from automatically connecting at startup?

We have MFA configured, which results in frequent MFA popup prompts for users. Since VPN is not required very often, we would prefer to avoid automatic connections with popups unless necessary.

[AEK]

In the VPN profile try change these parameters following your need.

Current Connection	Select the current VPN tunnel.
	Auto Connect	Select a VPN tunnel for endpoints to automatically connect to when the end user logs into the endpoint. The end user must have established VPN connection manually at least once from FortiClient GUI.
	Auto Connect Only When Off-Fabric	Autoconnect to the selected VPN tunnel only when EMS considers the endpoint off-fabric. See On-fabric Detection Rules.
Always Up Max Tries	Maximum number of attempts to retry a VPN connection lost due to network issues. If set to 0, it retries indefinitely.

Ref:

https://docs.fortinet.com/document/forticlient/7.4.3/ems-administration-guide/682498

In your case you should select nothing in the "Auto Connect" field.

[Zimp]

Thank you for your quick response.

The Auto Connect field was initially empty, but the issue was resolved after also clearing the Current Connection field.