Forticlient in Windows 10

[iluntasun]

Hello, I am testing Windows 10, but I can't seem to be able to connect to our FortiNet.

Forticlient gets stuch at 98% for a while, then disconnects. I have tried all solutions that worked for me in the past when I had the same problem in Windows 8.1, to no avail.

Is this being worked on?

Thanks,

Tanausu

[billwagnon]

sahins I have had the same problem on Win 10.  

Connection succeeds, there is traffic, but you can't talk to the other computer.

Per a friend in the security business, the issue is with the certificate on the computer to which you are making the VPN connection. 

Windows 10 does not support SSL as it has been deprecated.  Unfortunately upgrading the cert to the new NIST standard will break connectivity for Windows XP machines.  Windows XP will soon be practically obsolete, as they will not be able to access any secure websites regardless of VPN.

Hope this helps!  It should all come to a head in the next few months.  We have had to roll our machines back to 8.1 just to get work done.

[egauk]

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

[defcon]

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

[Chris_Lin_FTNT]

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

[defcon]

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

[Chris_Lin_FTNT]

defcon wrote:

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

Port is supported. Did you miss the url format someone mentioned in the app review?

[defcon]

Chris.Lin wrote:

defcon wrote:

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

Port is supported. Did you miss the url format someone mentioned in the app review?

Ya, Missed the Format.

[wlongo]

defcon wrote:

Chris.Lin wrote:

defcon wrote:

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

Port is supported. Did you miss the url format someone mentioned in the app review?

Ya, Missed the Format.

can we post the url format? I am not seeing one in the app review (in fact i see only 7 reviews, 3 of which are complaining about lack of port support.

[Chris_Lin_FTNT]

To use port 10443 and realm “realmname”, [link]https://vpn.server.addrerss.com:10443/realmname[/link]

To ignore server certificate error, https://vpn.server.addres...e-certificate-errors=1 , or https://vpn.server.addres...:10443/realmname?ice=1 , or https://vpn.server.addres..com:10443/realmname?ice

To enable pop-up to select client certificate, https://vpn.server.addres...:10443/realmname?cert=

To pre-configure a client certificate, https://vpn.server.addres...SubStringOfCertSubject

To use PKI user (certificate user). https://vpn.server.addres...no-username-password=1 , or https://vpn.server.addres...lmname?cert=&nup=1 , or https://vpn.server.addres...ealmname?cert=&nup

[wlongo]

Chris.Lin wrote:

To use port 10443 and realm “realmname”, https://vpn.server.addrerss.com:10443/realmname

To ignore server certificate error, https://vpn.server.addres...e-certificate-errors=1 , or https://vpn.server.addres...:10443/realmname?ice=1 , or https://vpn.server.addres..com:10443/realmname?ice

To enable pop-up to select client certificate, https://vpn.server.addres...:10443/realmname?cert=

To pre-configure a client certificate, https://vpn.server.addres...SubStringOfCertSubject

To use PKI user (certificate user). https://vpn.server.addres...no-username-password=1 , or https://vpn.server.addres...lmname?cert=&nup=1 , or https://vpn.server.addres...ealmname?cert=&nup

if realms aren't in use (disabled in features) what would be used in lieu of 'realmname'?

to add to this, i enabled realms and configured one named w10.

i can login via web using https://my.vpn.com:10443/remote/login?realm=w10

I attempted the following using the w10 forticlient app

https://my.vpn.com:10443/remote/login?realm=w10

https://my.vpn.com:10443/w10?ice=1

https://my.vpn.com:10443/w10

https://my.vpn.com:10443/remote/login?realm=w10?ice=1

all prompt me for my login credentials but fail to work.

here are a couple examples, this one provides an error, the rest just continue to prompt me for a username and password. (i'm not typoing, i can login to the website without fail)

http://picload.org/image/rgdpcgrl/1.png

[link]http://picload.org/image/rgdpcgri/2.png[/link]

thanks for the speedy reply by the way!