Skip to main content
Esteemed Contributor III
Aug 29, 2006 2:27 AM UTC
Question

Scripting FortiClient VPN profiles

Hi all, Let me start off by start off by saying please don' t knock me (at least too hard) on the logic of this one - I know it' s weird and their are other easy means of doing what I am attempting to achieve; but I' m trying to remove the usual problem of the thing that sits and controls the keyboard. On the rare occassion, I need to make a slight modification to the FortiClient VPN profiles on the user' s computer. I don' t want to: * provide the users with instructions of how to do it as there are some of them who consider themselves " experts" or " IT literate" and will end up playing with the settings and mess things up. * have to recreate all of the profiles and give the profiles to the users to import as some of the users are just too ignorant to actually get it right and there is just too many profiles to do it. So, my question is - is there a way script changes to the FortiClient VPN profiles? Or is there another easy method to apply the changes to the VPN profiles? Thanks in advance! James

    4 replies

    red_adair
    New Member
    Aug 30, 2006 9:55 AM UTC
    For VPN - you could use " policy VPN" instead. This would download the IKE params from the FGT. Check the Releasenotes of the latest release - has to be enabled through CLI. Otherwise: All the settings are stored in the Win Registry - you could change the values there too. -R.
    Esteemed Contributor III
    Aug 31, 2006 2:13 AM UTC
    OKay - thanks - I' ll look into this....
    zantek
    New Member
    Sep 5, 2006 9:05 PM UTC
    VPN policies are simply registry keys and values. You could use regedit /s to import reg keys silently (eg. in a login script).
    Esteemed Contributor III
    Sep 6, 2006 12:35 AM UTC
    Thanks for help - it definitely is a step forward. What if I am just wanting to change someone' s password or preshared key? How can I do that without setting up their profile, exporting the registry setting and getting the script to reimport it? I can see there is a registry entry for it, but it looks encrypted
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT