How to disable the FortiClient disconnect button?

[FOrtiBen]

Hi All,

I'm a newbie on Fortinet product.  I have manually installed the FortiClient on Win10 using the installer from the Fortinet website and I noticed that the client allows the user to manually disconnect it from EMS server.  How can I disable the button?

Thanks in advance 

[SteveG]

Although we use EMS there are a couple of ways of protecting FortiClient being disconnected. You can apply a password to FC which a user would need to enter in order to make any changes, or in our case disconnect from EMS. Doesn't sound like you're registering the client to either EMS or a FortiGate but you can also stop users from 'unregistering'.

The setting in EMS is "Require Password to Disconnect From EMS" but there will be a config line which achieves the same.

[FOrtiBen]

Thanks.  We have EMS server and the Forticlient is registered to the EMS.  I just don't know yet the steps on how to deploy the Forticlient from the EMS that is why i installed it manually.  I have searched the admin guide and found the deployment guide, i will give it a go. 

[SteveG]

Deployment is simple, you need to create a new 'profile' under "Endpoint Profiles", "Local Profiles". Once you've done that you'll see a tab called "Deployment" and that's where you define which installer to use, a time to install and an AD account that has local admin rights on the PC you'd like to install FC. Here's one of ours.

 

[FOrtiBen]

Thanks Steve. 

I managed to work it out including the AD setting.  The client is installing now but I the VPN doesn't show on the Forticlient once installed.  I have ticked it on the installer and enabled it on the profile but it's still not showing.  

[SteveG]

Good to hear you're making progress. Sounds like the Remote Access feature is installed on the desktop, so must be the EMS Profile, have you checked that Remote Access is actually enable in the Profile that's applied to the PC and that the PC is in the expected EMS Group.