Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
iluntasun
New Contributor

Forticlient in Windows 10

Hello, I am testing Windows 10, but I can't seem to be able to connect to our FortiNet.

Forticlient gets stuch at 98% for a while, then disconnects. I have tried all solutions that worked for me in the past when I had the same problem in Windows 8.1, to no avail.

 

Is this being worked on?

 

Thanks,

 

Tanausu

1 Solution
kolawale_FTNT

The upcoming FortiClient 5.2.4 release supports Windows 10. Both IPsec VPN and SSL VPN work correctly.

 

FortiClient 5.4.0 Beta 3 should also support Windows 10.

View solution in original post

51 REPLIES 51
billwagnon
New Contributor

sahins I have had the same problem on Win 10.  

 

Connection succeeds, there is traffic, but you can't talk to the other computer.

 

Per a friend in the security business, the issue is with the certificate on the computer to which you are making the VPN connection. 

 

Windows 10 does not support SSL as it has been deprecated.  Unfortunately upgrading the cert to the new NIST standard will break connectivity for Windows XP machines.  Windows XP will soon be practically obsolete, as they will not be able to access any secure websites regardless of VPN.

 

Hope this helps!  It should all come to a head in the next few months.  We have had to roll our machines back to 8.1 just to get work done.

egauk
New Contributor II

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

defcon
New Contributor

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

Chris_Lin_FTNT

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

defcon

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

Chris_Lin_FTNT

defcon wrote:

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

Port is supported. Did you miss the url format someone mentioned in the app review?

defcon

Chris.Lin wrote:

defcon wrote:

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

Port is supported. Did you miss the url format someone mentioned in the app review?

Ya, Missed the Format.

wlongo
New Contributor

defcon wrote:

Chris.Lin wrote:

defcon wrote:

Chris.Lin wrote:

defcon wrote:

egauk wrote:

FYI, the FortiClient available in the Windows Store is working for SSL VPN under Windows 10 Insider Preview builds!

... and it does accept 2 factor authentication, I hope Fortinet gets this fixed.

It works with FortiToken and RADIUS challenge.

ah missed that, but it does not seem to be working with a specified port number :port

Port is supported. Did you miss the url format someone mentioned in the app review?

Ya, Missed the Format.

can we post the url format? I am not seeing one in the app review (in fact i see only 7 reviews, 3 of which are complaining about lack of port support.

Chris_Lin_FTNT

To use port 10443 and realm “realmname”, [link]https://vpn.server.addrerss.com:10443/realmname[/link]

To ignore server certificate error, https://vpn.server.addres...e-certificate-errors=1 , or https://vpn.server.addres...:10443/realmname?ice=1 , or https://vpn.server.addres..com:10443/realmname?ice

To enable pop-up to select client certificate, https://vpn.server.addres...:10443/realmname?cert=

To pre-configure a client certificate, https://vpn.server.addres...SubStringOfCertSubject

To use PKI user (certificate user). https://vpn.server.addres...no-username-password=1 , or https://vpn.server.addres...lmname?cert=&nup=1 , or https://vpn.server.addres...ealmname?cert=&nup

wlongo

Chris.Lin wrote:

To use port 10443 and realm “realmname”, https://vpn.server.addrerss.com:10443/realmname

To ignore server certificate error, https://vpn.server.addres...e-certificate-errors=1 , or https://vpn.server.addres...:10443/realmname?ice=1 , or https://vpn.server.addres..com:10443/realmname?ice

To enable pop-up to select client certificate, https://vpn.server.addres...:10443/realmname?cert=

To pre-configure a client certificate, https://vpn.server.addres...SubStringOfCertSubject

To use PKI user (certificate user). https://vpn.server.addres...no-username-password=1 , or https://vpn.server.addres...lmname?cert=&nup=1 , or https://vpn.server.addres...ealmname?cert=&nup

if realms aren't in use (disabled in features) what would be used in lieu of 'realmname'?

 

to add to this, i enabled realms and configured one named w10.

i can login via web using https://my.vpn.com:10443/remote/login?realm=w10

 

I attempted the following using the w10 forticlient app

 

https://my.vpn.com:10443/remote/login?realm=w10

https://my.vpn.com:10443/w10?ice=1

https://my.vpn.com:10443/w10

https://my.vpn.com:10443/remote/login?realm=w10?ice=1

 

all prompt me for my login credentials but fail to work.

 

here are a couple examples, this one provides an error, the rest just continue to prompt me for a username and password. (i'm not typoing, i can login to the website without fail)

 

http://picload.org/image/rgdpcgrl/1.png

[link]http://picload.org/image/rgdpcgri/2.png[/link]

 

thanks for the speedy reply by the way!

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors