Technical Tip: FortiClient SAML Authentication Con...

MZBZ · 02-23-2025

Description This article provides a workaround for installing EMS 7.4.0.1793 after January 2025, which by default is not possible due to the strict pgagent dependency requirements. Scope Linux-based FortiClient EMS v7.4. Solution During the installat...

MZBZ · 01-26-2025

Description This article describes how the FortiClient IPSec dial-up VPN's IKEv2 Session Resumption feature operates in relation to DPD (Dead Peer Detection) and the FortiGate FortiOS tunnel management procedure. It includes a PowerShell one-liner an...

MZBZ · 01-14-2025

Description This article how to collect logs when contacting Fortinet TAC in case an EMS Linux server is not working as expected. Scope Linux-based FortiClient EMS v7.4.x. Solution If a Linux-based EMS v7.4.x server has stopped responding and is not ...

MZBZ · 01-10-2025

Description This article describes the role of HTML renderers (browsers) in FortiClient when establishing VPN tunnels with SAML authentication. FortiClient displays the IDP login page to the end user using either internal or external browsers, depend...

MZBZ · 12-26-2024

Description This article provides solutions to increase the resiliency of road warrior and dial-up VPN connections against disconnection, without the need to save usernames and passwords or re-enter 2FA/MFA tokens. Scope FortiClient SSL and IKEv2 dia...

MZBZ · 09-12-2025

FortiClient ARM is still in beta phase. Please try 7.4.4.

MZBZ · 09-12-2025

This setup is completely possible with FortiClient 7.4.4 and FortiOS 7.6GA or FortiOS 7.4.9 (to be released). 2FA for username and password can be added on FortiGate or preferably on FortiAuthenticator. Configuration will be mixing these: https://doc...

MZBZ · 08-30-2025

Better to switch to IKEv2 ASAP. FortiClient 7.4.4+ will not support IKEv1 anymore.

MZBZ · 07-01-2025

If you have issues with IPSec IKEv2 over TCP: 1. Make sure you are using FortiGate FortiOS 7.4.8+ or 7.6.3+ 2. Test with TCP port other than 443 if you have issues with 443. Compare the result. 3. Wait for FortiClient 7.4.4/7.4.5 4. Contact Fortinet ...

MZBZ · 04-21-2025

We have two FortiClient versions: FortiClient VPN only (standalone) and FortiClient which connects to EMS. IKEv2 over TCP is officially supported with the latter one. FortiClient standalone and licensed version feature comparison | FortiClient 7.4.3 ...

User Statistics

User Activity

Technical Tip: How to install FortiClient EMS 7.4.0 (Build 1793) after January 2025 (forticlientems pgagent dependency)

Technical Tip: FortiClient IPSec IKEv2 Dialup VPN Session Resumption Explained

Troubleshooting Tip: Disaster Recovery EMS Linux Log Collection