Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
stulluk
New Contributor

forticlient 7.4.0 - unable to modify settings

I am running Forticlient 7.4.0.1636 under Ubuntu 22.04 to connect my company's VPN.

My problem: In the settings menu, if I unlock it , change some settings below, and then connect to VPN, my changes are not saved, and they return back to original values as below:

 

2024-10-17-08-39-36.png

 

I want to change these settings because :

1) Logging causes constant pressure on the disk I/O

2) I have to click multiple popups to accept invalid server certificate and unnecessary confirmation dialogs everytime I connect.

See below for screenshots:

2024-10-17-08-42-35.png

 

2024-10-17-08-42-57.png

2024-10-17-08-43-10.png

How can I modify the settings so that I can reduce number of steps when connecting to VPN ?

13 REPLIES 13
AEK
SuperUser
SuperUser

Hi Sertac

 

Regarding certificate warning, I tried on a FCT 7.4.0 (with EMS) and I confirm it asks to validate it every time I connect. I guess this is for security reason.

Actually for security it is recommended to use a trusted certificate, otherwise there is a risk of MITM attack. Or even better, use IPsec instead of SSL-VPN.

 

Regarding SSL-VPN logging, go the EMS, Endpoint Profiles > System Setting, the edit the profile you are using, under "Log" section you can disable VPN logs.

AEK
AEK
AEK
SuperUser
SuperUser

It seems there may be a solution for invalid server certificate.

In EMS, under you remote access profile, disable the "Enable Invalid Server Certificate Warning". But as I said above this is not recommended for security, just like SSL VPN itself.

AEK
AEK
stulluk
New Contributor

Hi @AEK  thanks for your responses.

When you say "In EMS / go to EMS" -> Do you mean those settings can be changed from the EMS server side ? 

AEK

Yes. You change the profile on EMS and it will be pushed to the client.

AEK
AEK
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors