Skip to main content
Contributor III
August 29, 2006
Question

Scripting FortiClient VPN profiles

  • August 29, 2006
  • 2 replies
  • 2599 views
Hi all, Let me start off by start off by saying please don' t knock me (at least too hard) on the logic of this one - I know it' s weird and their are other easy means of doing what I am attempting to achieve; but I' m trying to remove the usual problem of the thing that sits and controls the keyboard. On the rare occassion, I need to make a slight modification to the FortiClient VPN profiles on the user' s computer. I don' t want to: * provide the users with instructions of how to do it as there are some of them who consider themselves " experts" or " IT literate" and will end up playing with the settings and mess things up. * have to recreate all of the profiles and give the profiles to the users to import as some of the users are just too ignorant to actually get it right and there is just too many profiles to do it. So, my question is - is there a way script changes to the FortiClient VPN profiles? Or is there another easy method to apply the changes to the VPN profiles? Thanks in advance! James

    2 replies

    red_adair
    New Member
    August 30, 2006
    For VPN - you could use " policy VPN" instead. This would download the IKE params from the FGT. Check the Releasenotes of the latest release - has to be enabled through CLI. Otherwise: All the settings are stored in the Win Registry - you could change the values there too. -R.
    Contributor III
    August 31, 2006
    OKay - thanks - I' ll look into this....
    zantek
    New Member
    September 5, 2006
    VPN policies are simply registry keys and values. You could use regedit /s to import reg keys silently (eg. in a login script).
    Contributor III
    September 6, 2006
    Thanks for help - it definitely is a step forward. What if I am just wanting to change someone' s password or preshared key? How can I do that without setting up their profile, exporting the registry setting and getting the script to reimport it? I can see there is a registry entry for it, but it looks encrypted
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.