Remove auto save feature on the Forticlient

[martyyy]

Hi,

We have our customer encounter issues with their end users getting VPN locked out and upon checking, the Forticlient still has their OLD passwords.

We already disabled the option "Allow client to save password" under VPN Manager > SSL VPN > Portal Profiles > Tunnel Mode Client Options

So far, we got multiple different issues on the Forticlient 2 known issue are below.

Scenario 1. User able to login and Logout on the VPN. Username and Password are removed upon Logout but still seeing the check box to save password.
Scenarion 2. Check box is gone. User is able to login and logout but upon logout, the username goes blank but the password remains.

The issue is happening on users whose passwords have been reset by our customer since they are using AD to manage end user accounts. The old password has been saved on the forticlient and we want the option to save the password disappear to avoid the users using their old passoword to avoid being locked out

Our forticlient version is 7.0.7.0345 this is installed on a windows server 2022 (This is the one where the password is retained for some reason)
End-user forticlient version 7.0.13.0577 installed on a Win10 1809 (OS Build 17763.1039) (This is the one with the check box still available)

Appreciate your feedbacks. TIA :) 

[Stephen_G]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Stephen_G]

Hello martyyy,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Stephen_G]

Hello martyyy,

From talking to others, it sounds like you can disable this on the FortiGate by setting cfg-save to manual. This article seems related.

When it is disabled, the endpoint will not be allowed to save credentials, even when the option is enabled in its own configuration.

Regards,