Forticlient – SSLVPN .deb packages


Try the brand-new open-source OpenFortiGUI as replacement for the Forticlient.

Forticlient – SSLVPN is a VPN Client to connect to Fortigate Devices with minimal effort, packaged here for Ubuntu and Debian.

Officially there is only a generic tar.gz package available. As I use Ubuntu most the time, I decided to build .deb packages for 32/64bit Ubuntu with a nice desktop icon to start : )

This packages should also work on debian, but i did not test this on myself now (will follow).

For upgrades just download the new package and install it, the package manager will do the upgrade for you.

I will share my packages here for you to download:

Update 14.4.2017 (build on Ubuntu 16.04):

Since version 4.4.2327-2 builds are generated on Ubuntu 16.04.

Forticlient SSLVPN 4.4.2333-1 32bit
Forticlient SSLVPN 4.4.2333-1 64bit

Old versions (build on Ubuntu 16.04):

Forticlient SSLVPN 4.4.2332-1 32bit
Forticlient SSLVPN 4.4.2332-1 64bit

Forticlient SSLVPN 4.4.2331-1 32bit
Forticlient SSLVPN 4.4.2331-1 64bit

Forticlient SSLVPN 4.4.2330-1 32bit
Forticlient SSLVPN 4.4.2330-1 64bit

Forticlient SSLVPN 4.4.2329-1 32bit
Forticlient SSLVPN 4.4.2329-1 64bit

Forticlient SSLVPN 4.4.2327-2 32bit
Forticlient SSLVPN 4.4.2327-2 64bit

Old versions (build on Ubuntu 14.04):

Forticlient SSLVPN 4.4.2327 32bit
Forticlient SSLVPN 4.4.2327 64bit

Forticlient SSLVPN 4.4.2325 32bit
Forticlient SSLVPN 4.4.2325 64bit

Forticlient SSLVPN 4.4.2323 32bit
Forticlient SSLVPN 4.4.2323 64bit

Forticlient SSLVPN 4.4.2317 32bit
Forticlient SSLVPN 4.4.2317 64bit

Forticlient SSLVPN 4.4.2313 32bit
Forticlient SSLVPN 4.4.2313 64bit

Forticlient SSLVPN 4.4.2312-3 32bit
Forticlient SSLVPN 4.4.2312-3 64bit

Legacy version (works with Ubuntu < 15.04):

Forticlient SSLVPN 4.4.2312 32bit
Forticlient SSLVPN 4.4.2312 64bit

Forticlient SSLVPN 4.4.2307 32bit
Forticlient SSLVPN 4.4.2307 64bit

Forticlient SSLVPN 4.4.2303 32bit
Forticlient SSLVPN 4.4.2303 64bit

204 thoughts on “Forticlient – SSLVPN .deb packages

  1. nwildner

    I’ll pay you a beer. No more need to install complete “ia32-libs” to make this piece of software run.

    1. Bogdan Popescu

      Hy !
      I have a Ubuntu 16.04 LTS and I try different version for my version but is not working….It apper a message that say …Waiting to install….and it’s stop.
      If you have any suggestion…..thank you very much

  2. James

    This is super awesome, but isn’t working in Ubuntu 15.04. I think there’s a problem with the way the setup script tries to add a route, because the log shows an error: route -n add -net 192.168.XXX.XXX netmask gw 10.212.XXX.XXX
    SIOCADDRT: No such device

    Manually adding a route (using sudo and the above command in a terminal) appears to make it all work.

  3. Ti Post author

    Interesting, i didnt try it with Ubuntu 15.04 now. But as Ubuntu 15.04 final isnt released now it can be a bug there or in the SSL-VPN Binaries. Lets wait for the final Ubuntu 15.04 release, then we can test again and in case report it to the Fortinet Support Team.

  4. Kyle Gordon

    Many thanks for this! However, with regards to Debian support, install seems to fail on Debian Wheezy.

    The package calls for libpango-1.0-0, yet Debian Stable only provides libpango1.0-0 You have the correct name, but Debian hasn’t caught up yet.

  5. Ti Post author

    Thanks for the information, lets see if i can investigate this further. But first i need to install Debian 🙂

  6. Gabriele Vidali

    I suggest modifying the
    Ubuntu’s /etc/resolv.conf file is a symbolic link to /run/resolvconf/resolv.conf so change it to:
    mv -f “$base/resolv.conf.backup” /run/resolvconf/resolv.conf

  7. Ti Post author


    I do not modify the original files provided by fortinet, i just build the “easy2go” .deb package arround it. If you want to modify some files, please do after installation or use the original package from fortinet.

    I always use the latest original package provided by fortinet in their support area, you need an account to access it. But there are also plenty of other sites hosting this files. The official site should also provide the clients.

  8. Francisco Prieto

    Thank you very much for these packages.

    IWorked like a charm in Ubuntu 14.10, but I just installed Ubuntu 15.04 (final release) and doesn’t work; it connects to tunnel but it doesn’t work at all…

    Hope there will be a new forticlient release soon…

    Thanks and best regards.

  9. Giovanni Mellini

    First of all tks for packaging the FortiClient 🙂

    I just upgraded to Ubuntu 15.04 today and noticed that the FortiClient was not working.
    I did a bit of search in the code and found where the problem is and tested a patch against your last package (forticlient-sslvpn_4.4.2312-1_amd64.deb).

    Follow the patch, that is for file (both in 32 and 64bit dir):

    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ diff -u
    — 2015-04-25 08:01:16.993683848 +0200
    +++ 2015-04-25 15:06:41.236863760 +0200
    @@ -62,7 +62,7 @@
    ifn=`route -n|grep “^″|awk ‘{print $8}’`
    echo “interface $ifn” >> “$base/forticlientsslvpn.log”

    -addr=`ip addr show $ifn | grep “inet” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’`
    +addr=`ip addr show $ifn | grep “inet” | grep “brd” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’`
    echo “address $addr” >> “$base/forticlientsslvpn.log”

    echo “delete route” >> “$base/forticlientsslvpn.log”

    As you can see the only thing to do is to add the
    grep “brd” |
    grep “inet” |
    on row 65 of the script.

    The problem is the following with Ubuntu 15.04
    After the connection goes up and ppp0 interface is created (A.B.C.D is the IP address of SSL gateway)

    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ ip addr show ppp0
    13: ppp0: mtu 1354 qdisc pfifo_fast state UNKNOWN group default qlen 3
    inet A.B.C.D peer scope global ppp0
    valid_lft forever preferred_lft forever
    inet A.B.C.D/32 brd A.B.C.D scope global ppp0
    valid_lft forever preferred_lft forever

    the script execute the following command (line 65) and store the output in $addr var:
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ ip addr show ppp0 | grep “inet” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’

    as you can see with 15.04 you receive a double IP in 2 rows.

    After that the script fails on line 98 while executing
    route -n add default gw $addr
    because $addr is a multi line value and we see in the log the error reported in some comment:
    SIOCADDRT: No such device

    After the patch the command executed is the following:
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ ip addr show ppp0 | grep “inet” | grep “brd” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’

    and the $addr var is now ok. Everything works fine 🙂

    I didn’t tested the patch in older Ubuntu version (14.10 or 14.04) where the original script where working but I’m pretty sure it’s ok, because the brd key is every time here.

    So can someone else test and if possible can you repackage your .deb with the patch included?

  10. Ti Post author

    Okay, that script part was already once a problem in a former release of forticlient ssl-vpn. We contacted fortinet about the problem and they made the fix then in their official files available.

    I will contact Fortinet again, so we will have a clean release with that adjustment. Maybe i will release a special Package for Ubuntu 15.04, please be patient.


  11. Giovanni Mellini

    Hi Ti,
    I tried the new .deb package for 15.04 for 64bit (Forticlient SSLVPN 4.4.2312-2 64bit) and is not working.
    Is not working because the patched inside 64bit/helper/ dir contains the wrong doble quotes around the brd word.

    In your script is:
    grep “brd”
    and shall be:
    grep “brd”

    I tested the new package on Ubuntu 14.04 (not in 14.10 because is not booting in VirtualBox) and I found that the right grep word to use to have the new package working in 14.04 (and 14.10 too probably) is “peer”.

    So the right patch is to change line 66 of as follow:
    addr=`ip addr show $ifn | grep “inet” | grep “peer” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’`

    This is tested and working on Ubuntu 14.04 and 15.04 64bit (32bit is the same).

    I noticed that the 32bit package for 15.04 is not patched so please include the fix in 32bit/helper/ file.
    Last. The 32bit/ dir is inside 64bit package too; can be removed or just patch the script inside 32bit dir too.

    Tks again

  12. Giovanni Mellini

    Hi Ti
    wordpress converts the double quotes in a wrong way, so please refer to the quotes of the original grep “inet” syntax to fix the package.


  13. Giovanni Mellini

    I tested the new patch on Ubuntu 14.10 and is working fine too. So I think the last patch is ok for all Ubuntu version from 14.04 to 15.04

  14. Ti Post author


    oh, sorry for that inconvenience. I just did “copy & paste” and it was late already 😀
    As that i released it as beta, i will fix this issues and release a new package soonest.

    Thanks Giovanni for your support.

  15. Fabian Kallmeier

    Worked for me on debian wheezy after forcing the install because of the error mentioned above:

    “The package calls for libpango-1.0-0, yet Debian Stable only provides libpango1.0-0 You have the correct name, but Debian hasn’t caught up yet.”

    For debians new stable (jessie) it should be fine I guess.

  16. Francisco Prieto

    Confirmation: new version (Forticlient SSLVPN 4.4.2313 64bit) works in Ubuntu 15.04

    Best regards.

  17. sanjay

    When installing on 12.04 i get dependency error:
    “Dependency not satisfiable: libpango-1.0.0”

    On 12.04, the package name is libpango1.0.0 not libpango-1.0.0

  18. Marco

    Thanks mate 🙂
    worked almost flawlessly
    I had to manually install lib32gcc1 on my 64bit Ubuntu 14.04
    Other than this everything worked out just fine

  19. Fábio


    Using Debian 8 (Jessie), I’m having showlicense error when I accept the terms:
    showlicense: Fatal IO error 5 (Input/output error) on X server :0.

    Any idea?

    1. Ravi

      I get this error as well in Debian 8. But running the command line client to start the vpn is working for me.

    2. NaturalFork

      I am having the same issue. The command line version works fine, which is all I really need. I know this boils down to not having a certain package installed. I just forget which one it is.

    3. Capita

      Hi folks ! I had the same issue that you have, and what I did was the following:
      Open a console as root and run /opt/forticlient-sslvpn/64bit/./helper/setup
      This setup script will show you the license, just press space bar and at the end, write yes and press Enter.
      That’s it, jsut open you forti client app and configure it. good luck.

      if you have any question write me an email

  20. Nahhaal

    Confirming that the provided .deb package works OK on LMDE 2 (betsie) [64bit]

    sudo gdebi forticlient-sslvpn_4.4.2313-1_amd64.deb

  21. Damian


    I’ve just installed the .deb and it worked right away.

    Thank you very much!

  22. Juan M. Molina

    Installed and working flawlessly on Ubuntu 15.04 64bit. I didn’t need to do anything other than install the .deb package.

    Thank you very much!

  23. Nikolay

    Did anyone have the following error?
    debug1: ssh_exchange_identification: FortiClient security check failed. Please retry connection using http for FortiClient security checking.
    I receive that when i try to ssh to a server over the VPN? Google doesn’t know anything…

  24. fprietog

    Updated & working:
    Forticlient SSLVPN 4.4.2317 64bit @ Ubuntu 15.04

    Thank you very much for keeping us up to date!

  25. Whenpigswifi

    This is great!

    Question, or maybe I missed it in the article, but I have been looking for a way to hook into the fortinet vpn via command line. Is there anything out there like this?

  26. Ti Post author

    Hi Whenpigswifi,

    depends on what you want to do. This package also includes the forticlient CLI utility whereas you can use it for your shell scripts. Its located in /opt/forticlient-sslvpn/[your-arch]/forticlientsslvpn_cli . Please note that Fortinet only provides this file as binary, so you cannot edit the source code. In the folder “helper” are some .sh files located, maybe you can use them for your work.

    Cheers Rene

  27. SilvioQ

    Hi! Thanks for the work. I tested on Debian Jessie and the client connects to server, but don’t create the tunnel.

    In Debian wheezy I used the forticlient client 22xx (Dec 2012) without troubles.

    Here is the log

    Thanks in advance!

  28. Rob G

    BTW… forgot to mention this is running great on Linux Mint 17.2 Cinnamon (14.04 Ubuntu).

  29. Eder Fontalvo Melendez

    Excellent !!, very good. It works great on Ubuntu 14.04.1 with Gnome

  30. Alex

    Hi, my setup does not start on Mint 17.2 KDE. Says: “This is first time you run forticlient ssl and you need the admin privilege to config”. Klick “ok” and the dialog to “accept the license agreement” is shown. “Accept”ed and than the (correct) root-password is given. Reaction: freezing “first time” window …
    I tried to install “ia32-libs-gtk” & “libgtk2.0-0:i386” & “xterm” manually – no way, not even an obvious shown error.
    Any ideas?
    Thanks !

    1. Gabo

      I have the same problem as you, Did you manage to install it?
      Could you install it? How did you do ?

      Help me please

    2. Pavla

      Hi, I have exactly the same problem. I don’t know what to do :-(. If you will have any ideas, let me know, thanks 🙂

  31. Vernier

    Working like a charm!

    I had to move the priority of dns up a bit to enable name lookups through the VPN. See following change to /etc/nsswitch.conf:

    diff /etc/nsswitch.conf.backup /etc/nsswitch.conf
    hosts: files dns mdns4_minimal [NOTFOUND=return]

  32. sasikumar

    Works like a charm on ubuntu 15.10. It fails to work with mobile data card (usbttymodem) because the service provider (I think some of them) is using pppd service and its locked and not accessible by forticlient.

  33. diozen

    I dont know why but I dont have the entire routing table in my Kali Linux 2.0, when I use the old version I have almost 140 routes and now using the newest version I only have 57 routes.

    Any idea?.

  34. Stephan P.

    Could you please provide a link to the original tar.gz? All links I found via Google are outdated.

  35. Jan

    Help -> About… -> FortiClient SSLVPN 4.0.2323
    the current version is: Forticlient SSLVPN 4.4.2323 😉


  36. Ti Post author

    This seems to be a inconsistency with the Fortinet package which is named 4.4.xxxx so i keep the name ; )


  37. Antônio Marcos

    In english Very good, in spanish Muy bueno, in french très bonne, but i am from Brazil, Rio de Janeiro, so Here we say “Show de bola”. Thanks man!

  38. Peter

    Nice work!
    But I have noticed the following.
    If I unpack and compare the binaries from your package v 4.4.2317 with binaries from the tar.gz file (same version) from Fortinet they are different.
    Also when installing your package it is possible to run the FortiClient whit out sudo, whereas this is not possible with the files from the tarball from Fortinet

  39. Ti Post author

    Hi Peter,

    it seems when packaging to a .deb file the binaries changes, i could not further investigate.

    Try on your own with the latest release .2323:
    1. Download the source package:
    2. Optional: If you want you can replace the binaries now with your own downloaded
    3. Build the package with: debuild -us -uc

    Cheers Rene

  40. Lindsay


    I have run into a problem with Forticlient on Ubuntu 15.10. I can use dig and nslookup to resolve names inside the VPNed network and I can ping and connect to systems inside the VPNed network using the raw IP address but not by their FQDNs.

    I’ve tried all versions from 4.4.2312 to 4.4.2323 with the same result.

    Any clues anyone?

    1. Ti Post author

      I am already working on an apt-repo, but will take some time until release. Stay tuned : )

  41. Matthias Braun

    Hi and thanks a lot for the packages!

    Is there a way to import a .conn, .sconn, .vpl, or .vpz file into the Forticlient?

    Thanks in advance!

    1. Ti Post author

      Hi Matthias,

      unfortunately no, the linux sslvpn only provides very limited functionality.

      The configuration is saved in ~/.fctsslvpnhistory , maybe this helps you.

      Cheers Rene

  42. rohit

    Is there any way to use this on fedora 23 ? I tried converting it to rpm package, didn’t work.

    1. Ti Post author

      Hi Rohit,

      Fortinet only provides a generic tar.gz file and i repackage it for Debian/Ubuntu.

      So it should be fine if you unpack the deb package and copy it manually to your /opt directory.


    2. Dag Olav Prestegarden

      First of all: Thank you very much for this package Rene, it’s much appreciated 🙂


      I had the same problem as you and managed to get it working using the following procedure::

      1: Convert the deb-file to rpm using alien: alien -r forticlient-sslvpn_4.4.2329-1_amd64.deb (the resulting rpm will not work as it supplies paths that collides with Fedoras filesystem package)
      2: Edit the rpm using rpmrebuild: rpmrebuild -pe forticlient-sslvpn-4.4.2329-1.x86_64.rpm
      3: Remove the lines at the bottom of the file that tries to supply the folders that already exists in your base filesystem. In my case, this was:

      %dir %attr(0755, root, root) "/"
      %dir %attr(0755, root, root) "/opt"
      %dir %attr(0755, root, root) "/usr"
      %dir %attr(0755, root, root) "/usr/share"
      %dir %attr(0755, root, root) "/usr/share/applications"
      %dir %attr(0755, root, root) "/usr/share/doc"

      4: The resulting file worked fine, and installed fine using dnf. The installed program tested and worked fine on my Fedora 24 64bit system.

  43. Cody S

    This is awesome. I’ve been migrating things from Ubuntu 9.10 to 14.04 and the forticlient that I brought over didn’t seem to work out very well. While Forticlient didn’t offer me much help in the ways of documentation to troubleshoot the issue, simply installing this deb and using that fixed my problem. Thank you.

  44. Alberto

    When I Installed this package I’m getting this error “Setup Failed”. Currently I’m using Debian 8

    Any idea???

  45. kushieda

    Is there a way to disable the client from modifying my resolv.conf file? I run a local dnsmasq cache that already handles the VPN name servers and would like to prevent it from changing it.

  46. C Bille

    i cannot configure the client on the first run. Demands the root password and does not accept it. Any clues ? I tried with several keymaps but cannot find which one use. Qwerty, Qwartz, Azerty ?

  47. Adeildo

    Gostei…. tive dificuldade com o pacote FortiClient SSLVPN 4.0.2312 no ubuntu 14LTS, problema com permissão no arquivo /home/user/.fctsslvpnhistory, mas resolvi com chown.

    1. Jonathan

      Que tipo de problema você teve Adeildo?
      Estou com o seguinte problema:
      Meu arquivo fctsslvpnhistory some sempre que reinicio o computador, perco as configurações de conexões salvas.

  48. Patricio Ascencio


    Do you have de tar.gz from generic package. I need it for fedora.


    1. Eugen


      yes it work for me on 16.04 but i install it manually.
      unzip the deb package and put the opt directory into your opt directory.
      i try it with the 4.4.2312-3 66 bit version because the newer versions doesn’t work for me.

    2. Ti Post author

      manual install by “dpkg -i ” on CMDline shoud work. I will further investigate this and will release 16.04 compatible packages.

  49. Luis Enrique


    I installed Forticlient SSLVPN 4.4.2327-2 64bit deb package , and somehow it didn’t appear on desktop space , but it was there. For ubuntu 16.04 just searching on /usr/share/applications and putting the fortinetclient-sslvpn.desktop on the bar and work without issues.

    Maybe the problem is on ubuntu side cause the same issue was with virtualbox. Semthing weird
    thank you for your work , i appreciate that , cheers !

  50. Robert Simpson

    Hello there.. I just installed this on a new Debian 8 machine and can create a connection via an SSH session. The connection takes over the session so I created another SSH session and tried to ssh to a remote switch and it did not work. I am assuming that the connection does not share connections with other sessions. I do not intend to use this locally with a desktop but only through SSH connections.
    Any pointers

  51. Guido Estevez

    I´m using Ubuntu 16.04 64 in a VirtualBox machine with Forticlient SSLVPN 4.4.2327-2 64bit

    The connection failed after few seconds. When the Bytes sent: count 945

    Status: Connected
    Bytes received: 163
    Bytes sent: 945

    Any idea?
    Thank you very much in advance

    1. Ti Post author

      Hi, the only difference is that the new builds are dependent on Ubuntu 16.04 packages. It may also run on Ubuntu 14.04 but i did not test. Also there is still the same forticlientsslvpn package version, so to be save use the 14.04 build as there is no benifit to use the Ubuntu 16.04 build.

      Cheers Rene

    1. Pavel Katovich

      /opt/forticlient-sslvpn/64bit/forticlientsslvpn_cli –server host:port –vpnuser username

  52. Andrea

    Hi, I’m running Debian 8 (if I read correctly on Kernel on VM using VMWare.
    The installation is been concluded succesfully, but when I try to run the Forticlientsslvpn, I put the Root pwd but by cliccking “Agree” on Licence form, the form “First run” won’t load correctly and shown only a gray form.
    any idea?

    1. Ti Post author

      Hi, try to start the program several times. I had this problem too on some machines but didnt figure out what causes the problem.

      Cheers Rene

  53. Dio

    Hi, my setup does not start on Ubuntu 14.04 LTS. Says: “This is first time you run forticlient ssl and you need the admin privilege to config”. Click “ok” and the dialog to “accept the license agreement” is shown. “Accept”ed and freezing on the “first run” window …

    Any ideas?
    Thanks !

    1. Ti Post author

      Hi, you tried already starting several times?

      My workmate had the same problem, but after some more startups it worked.

    2. brad

      I had the same problem, first run GUI wouldn’t accept my correct root password several times. What I did was:
      I’m using forticlient-sslvpn_4.4.2330-1_amd64.deb (installation with dpkg was ok)
      and Debian testing stretch

      1) execute:
      myUser@myHost:~$ /opt/forticlient-sslvpn/64bit/helper/
      Need root privilege to continue the setup, trying sodu…
      [sudo] password for myUser:
      Sorry, user myUser is not allowed to execute ‘/opt/forticlient-sslvpn/64bit/helper/ 3’ as root on myHost.
      /opt/forticlient-sslvpn/64bit/helper/ line 29: /opt/forticlient-sslvpn/64bit/helper/forticlientsslvpn.install.log: Permission denied
      it seems that ‘sudo’ does not work here, try to use ‘su’
      Here I used my root password and it was accepted, then I agreed EULA

      2) Then:

      myUser@myHost:~$ /opt/forticlient-sslvpn/64bit/forticlientsslvpn_cli -server vpnServer:vpnPort -vpnuser vpnUser
      Password for VPN:

      after give vpnuser password and accept certificate it worked 🙂

      STATUS::Login succeed
      STATUS::Starting PPPd
      STATUS::Initializing tunnel
      STATUS::Connecting to server
      Press Ctrl-C to quit
      STATUS::Tunnel running

      Then it also worked on GUI

  54. Anders Bolager

    Thanks a lot. If I knew how, a six-pack would be on your way. (Oh, yeah, I hope you like micro brewed beer 🙂 )

  55. Dave

    Installed on CentOS 6.8 x86_64 using alien to convert to rpm. It required several i686 compatibility libraries not present by default on CentOS 6.8.

    1. Install CentOS 6.8 x86_64
    2. Install EPEL Repo

    sudo yum install epel-release

    3. Install Nux Desktop (apparently required to get alien)

    sudo rpm -Uvh
    yum update && yum install alien

    Borrowed from:

    4. Install missing libraries

    sudo yum install gtk2-2.24.23-8.el6.i686 gdk-pixbuf2-2.24.1-6.el6_7.i686 glib2-2.28.8-5.el6.i686 glib2-2.28.8-5.el6.i686 libSM-1.2.1-2.el6.i686 libX11-1.6.3-2.el6.i686 libXinerama-1.1.3-2.1.el6.i686 libgcc-4.4.7-17.el6.i686

    5. Convert .deb to .rpm

    cd /path/to/deb
    sudo alien –to-rpm –scripts forticlient-sslvpn_4.4.2329-1_amd64.deb

    6. Install .rpm

    rpm -ivh forticlient-sslvpn-4.4.2329-2.x86_64.rpm

    7. Locate and Invoke Forticlient SSL VPN application

    Applications=>Internet=>Forticlient SSL VPN (In my case)

    8. Do a little dance, drink a little beer, be happy 🙂

  56. Pingback: forticlientsslvpn doesn't work with a proxy on Cent OS 7 * VPN SSL Online

  57. Pingback: Linux da MSSQL GUI Bağlantı, FortiClient VPN, Remote Windows Uygulaması (Ubuntu, Kali .deb destekli) | mekân-ı erkân

  58. bpresles

    I’m using latest 4.4-2329-1 version on Ubuntu 16.04.1 64 bits, and it stops working after a few seconds. Apparently someone else had this issue, but nobody has replied to help him.

    Anyone having this issue was able to fix it?

    1. fprietog


      You may have a clue about what’s happening in the log files:

      (or in /opt/forticlient-sslvpn/32bit/helper if tou’re using 32 bits OS)

  59. Martin

    Your SSLVPN-forticlient package is running without an Problem since 2012 under my Debian at home. Thank you very much for your great work!
    Now I’d like to install the same software on my laptop, an arm V7 samsung chromebook XE303C12 with an Samsung Exynos 5250 Dual 1.7 GHz + ARM Mali-T604, with ArchLinux. Unfortunately there are no sources availible (for me) nor any pre-compiled packages. Do you have any solution for this problem?

  60. Juansoft

    Thanks you very vey very much for this brilliant .deb package!!

    Running you’re FortiClient VPN SSL program in Lbuntu 16.04.1 LTS without any problem!!

  61. John

    Hi – really appreciate you building these packages. Big help in enabling me to start to migrate some company machines to running linux instead of Windows 🙂 However, one question about the program. Are you making any changes to the default FortiClient software to accommodate being packaged for Linux? The reason I ask is because I have purchased and installed an SSL certificate for my FortiGate 100D firewall for the VPN. People who connect from the Windows edition of FortiClient work perfectly, it recognises the certificate and connects, no problem. But people running Linux and connecting using this package always get the warning about an invalid certificate. The VPN still connects, but only after they click the button to ignore the certificate warning and continue. Running Linux Mint 18 64bit.

    1. nikanik

      the same problem, but more worse, it’s not agree to ignore an invalid certificate.

  62. old fart

    Works great with Mint 17.3 and 18. Only problems have been that password does not stay saved for long time and also .fctsslvpnhistory file gets corrupted sometimes and needs to be deleted or to keep copy of it and replace it.

  63. Ravi

    Would you like to move it to Github, so people can contribute and issues can be tracked. Would be great for those who are stuck with Forticlient and don’t have Mac or Windows OS.

  64. clark lewis

    Thoughtful blog post . I loved the insight , Does anyone know where my business could get access to a fillable USPS PS 1000 copy to complete ?

  65. Pingback: Forticlient SSLVPN packages for Ubuntu/Debian – Scubarda

  66. fprietog

    Thank you very much for keeping us updated!
    New versión 4.4.2330-1 64 Bits working as expected under Ubuntu 16.10.

  67. Anhydrous

    Thank you for sharing these!! I’ve used alien and rpmrebuild to adapt it for my rhel workstation.. thank you!

  68. Amine

    Thanks for the tip.
    It’s work for me in ubuntu 14.04 installed in a VM. the problem is that VM became unreachable in my local netword (no ping, no ssh connexion).

    The problem can be caused by my cloud network conf or by the VPN client?

    1. Ti Post author

      Hi, it seems like you set your default route trough the vpn-tunnel. Normally you get the routes from Fortigate when connecting. Make sure you set up “Split-Tunneling” on your Fortigate for your Tunnel.

  69. Andrew

    I’m having trouble finding any instructions on how to use this. What file should I be selecting as certificate? Whichever .crt or .pem I pick results in “invalid pkcs#12 file” error.
    Also what password..? I don’t get asked this in Windows.

    1. Ti Post author

      Certificate is not mandatory if not configured on your endpoint. Just leave the fields blank.

    1. Ti Post author

      Hi, this is only valid for Windows/MAC versions. Version 4.4.2331 is the latest for Linux.

  70. Ergan

    It drops saved connections configuration from time to time. Where is this data stored, so I can backup the file?

  71. julian

    so where’s the source for the linux client?
    not planning on running untrusted software on my boxes if I can help it..
    (and before you say but it’s fortinet of course you trust them… No, actually )

    1. Ti Post author


      there is no source for the official Fortinet linux-client, only Fortinet has it. As i mentioned I only repackage it into a .deb package, no changes on original files.

      But there is also an open-source alternative for that:

      I am working on a GUI for this CLI-only Program. So stay tuned or compile yourself.


  72. defcon

    Works on ubuntu 17.04 with Wayland, had to use wsudo to launch initial setup though, but all good now 🙂

  73. seenureddy

    Is it possible to automate this connection ? My client side VPN connection is disconnecting continuesly. I want to auto mate the process when ever it’s disconnects need to connect it again. I want to try with the python. Please help me on this.

  74. Javier

    Hi, I’m trying to use the client, and I get this error: “Failed to parse fortisslvpn page.”, I have no idea about what this mean, Could you give some help?


  75. Azizasm

    works like charm

    in ubuntu install :;
    sudo dpkg -i openfortigui_0.2.10-1_i386.deb

  76. TucxMind

    Look forward to trying your: OpenFortiGUI.

    However for the current tool, FortiClient SSL; where would I find the config files for this once installed? I love this tool and use it daily in my Mint system, however there is occasion if my system crashes while the program is loaded / active, where I lose the profile that was active / live during that crash. That, and/or if I want to switch to another install / machine.

    Where would be a good place to ‘backup’ the config / data for this app.

    Thanks in advance. ~TucxMind

    Current OS: Mint 17.x

    1. TucxMind

      Ended up noticing this was ans a month later in another reply (above); in case missed by others… ‘config location’ is (in your home directory): /home/.fctsslvpnhistory

      File name:

      Not sure if this is the same for the new OpenFortiGUI.

      To restore / reimport. Just re- / install the .deb package, and then place your backed up .fctsslvpnhistory file in the home directory.

  77. Joel

    Just to keep it registered here what Capita said at 22/03/2017 at 01:15, if after an update you receive a “Setup Failed” message just run the setup again directly from its folder on the console with “sudo /opt/forticlient-sslvpn/64bit/helper/setup”, read and agree with the license and you’re ready.

  78. Joby

    Hi please help i get the following message on my ubuntu 16.4 64bit
    sudo openfortivpn -vvv
    DEBUG: Loaded config file “/etc/openfortivpn/config”.
    DEBUG: Config host = “”
    DEBUG: Config realm = “”
    DEBUG: Config port = “8443”
    DEBUG: Config username = “name”
    DEBUG: Config password = “********”
    DEBUG: Gateway certificate validation failed.
    DEBUG: Gateway certificate digest found in white list.
    INFO: Connected to gateway.
    ERROR: Could not authenticate to gateway (No cookie given).
    INFO: Closed connection to gateway.
    DEBUG: Gateway certificate validation failed.
    DEBUG: Gateway certificate digest found in white list.
    INFO: Logged out.

  79. Red

    Thank you, it works fine. But I have to enter my credentials every time ! How to solve this?

  80. hhllss

    I have a problem here while installing the latest package, I did not have that problem before (and I am missing OTP on your brand new OpenFortiGui which seems great !) :
    Lintian check results for /home/hlestrat/Téléchargements/forticlient-sslvpn_4.4.2333-1_amd64.deb:
    E: forticlient-sslvpn: control-file-has-bad-owner md5sums rene/rene != root/root
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid opt/ 1000/1000
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid opt/forticlient-sslvpn/ 1000/1000
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid opt/forticlient-sslvpn/32bit/ 1000/1000
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid … use –no-tag-display-limit to see all (or pipe to a file/program)
    E: forticlient-sslvpn: md5sum-mismatch opt/forticlient-sslvpn/64bit/helper/printcert
    E: forticlient-sslvpn: md5sum-mismatch opt/forticlient-sslvpn/64bit/helper/setup
    E: forticlient-sslvpn: md5sum-mismatch opt/forticlient-sslvpn/64bit/helper/showlicense
    E: forticlient-sslvpn: md5sum-mismatch … use –no-tag-display-limit to see all (or pipe to a file/program)

    What am I doing wrong ?

    Best regards,


  81. Pingback: Ubuntu development environment setup – kursluzz

  82. Pingback: Acesso remoto – VPN | Monolito Nimbus

  83. Pingback: Connecting SSL VPN FortiGate using Fedora 24 | >> IT UnderStandings <<

  84. Pingback: Ubuntu development environment setup – kursluzz – open source tech blog

  85. FirstKristan

    I see you don’t monetize your website, don’t waste your traffic, you can earn extra bucks every month because you’ve got hi quality content.
    If you want to know how to make extra money, search for: Mrdalekjd methods for $$$

  86. Stefano Mozart

    Thanks for the great work! Update 14.4.2017 is running OK on Ubuntu 17.04.

  87. Olivier

    Does anyone experiencing loss of a stored connection? I’ve set up a connection under a name of my choosing, and the person who used it could only use it once. The second time, it had vanished from the connection list.
    I’m sure I’m not alone in this case, but I can’t find an answer to this issue, whether in this comment thread or elsewhere on the net.
    Any hint anyone ?

  88. Othman


    Can i install this client from CLI, i need to install it on one of my server running ubuntu server 16.04 without desktop.


  89. Pingback: Acesso remoto – VPN – Monolito Nimbus

  90. Pingback: How to install Forti Client VPN on Centos | I ain't that super.....

    1. fprietog

      Is this project been abandoned because of openfortigui project? I think both projects can coexist.

      1. Ti Post author


        since some time the linux forticlient binaries are not available anymore for “normal” fortinet members. You need an FTDN(Fortinet Developer Network) Account which i dont have yet.

        This means i cannot access new versions of Forticlient VPN for Linux.

        I will look forward to “upgrade” our account to such one and update you.


  91. Daria

    Your software saved my skin! Thanks a bundle!! Misplaced my windows laptop on a day I needed to vpn into work because of snow. I used to be an IT person… in the 90s… on windows… Obsolete and out of my element, I got a serious crash course in ubuntu, emphasis on crash. I was able to get the vpn up and running in no time flat. I had other issues with dns being blocked by the firewall for only my machine. If you’ve ever heard of a fortinet firewall doing that to only ubuntu boxes, let me know! Either way this vpn client rocks!


Leave a Reply

Your email address will not be published. Required fields are marked *