Forticlient – SSLVPN .deb packages

sslvpn_screen

Try the brand-new open-source OpenFortiGUI as replacement for the Forticlient.

Forticlient – SSLVPN is a VPN Client to connect to Fortigate Devices with minimal effort, packaged here for Ubuntu and Debian.

Officially there is only a generic tar.gz package available. As I use Ubuntu most the time, I decided to build .deb packages for 32/64bit Ubuntu with a nice desktop icon to start : )

This packages should also work on debian, but i did not test this on myself now (will follow).

For upgrades just download the new package and install it, the package manager will do the upgrade for you.

I will share my packages here for you to download:

Update 14.4.2017 (build on Ubuntu 16.04):

Since version 4.4.2327-2 builds are generated on Ubuntu 16.04.

Forticlient SSLVPN 4.4.2333-1 32bit
Forticlient SSLVPN 4.4.2333-1 64bit

Old versions (build on Ubuntu 16.04):

Forticlient SSLVPN 4.4.2332-1 32bit
Forticlient SSLVPN 4.4.2332-1 64bit

Forticlient SSLVPN 4.4.2331-1 32bit
Forticlient SSLVPN 4.4.2331-1 64bit

Forticlient SSLVPN 4.4.2330-1 32bit
Forticlient SSLVPN 4.4.2330-1 64bit

Forticlient SSLVPN 4.4.2329-1 32bit
Forticlient SSLVPN 4.4.2329-1 64bit

Forticlient SSLVPN 4.4.2327-2 32bit
Forticlient SSLVPN 4.4.2327-2 64bit

Old versions (build on Ubuntu 14.04):

Forticlient SSLVPN 4.4.2327 32bit
Forticlient SSLVPN 4.4.2327 64bit

Forticlient SSLVPN 4.4.2325 32bit
Forticlient SSLVPN 4.4.2325 64bit

Forticlient SSLVPN 4.4.2323 32bit
Forticlient SSLVPN 4.4.2323 64bit

Forticlient SSLVPN 4.4.2317 32bit
Forticlient SSLVPN 4.4.2317 64bit

Forticlient SSLVPN 4.4.2313 32bit
Forticlient SSLVPN 4.4.2313 64bit

Forticlient SSLVPN 4.4.2312-3 32bit
Forticlient SSLVPN 4.4.2312-3 64bit

Legacy version (works with Ubuntu < 15.04):

Forticlient SSLVPN 4.4.2312 32bit
Forticlient SSLVPN 4.4.2312 64bit

Forticlient SSLVPN 4.4.2307 32bit
Forticlient SSLVPN 4.4.2307 64bit

Forticlient SSLVPN 4.4.2303 32bit
Forticlient SSLVPN 4.4.2303 64bit

184 thoughts on “Forticlient – SSLVPN .deb packages

  1. nwildner

    I’ll pay you a beer. No more need to install complete “ia32-libs” to make this piece of software run.

    Reply
    1. Bogdan Popescu

      Hy !
      I have a Ubuntu 16.04 LTS and I try different version for my version but is not working….It apper a message that say …Waiting to install….and it’s stop.
      If you have any suggestion…..thank you very much

      Reply
  2. James

    This is super awesome, but isn’t working in Ubuntu 15.04. I think there’s a problem with the way the setup script tries to add a route, because the log shows an error: route -n add -net 192.168.XXX.XXX netmask 255.255.255.0 gw 10.212.XXX.XXX
    SIOCADDRT: No such device

    Manually adding a route (using sudo and the above command in a terminal) appears to make it all work.

    Reply
  3. Ti Post author

    Interesting, i didnt try it with Ubuntu 15.04 now. But as Ubuntu 15.04 final isnt released now it can be a bug there or in the SSL-VPN Binaries. Lets wait for the final Ubuntu 15.04 release, then we can test again and in case report it to the Fortinet Support Team.

    Reply
  4. Kyle Gordon

    Many thanks for this! However, with regards to Debian support, install seems to fail on Debian Wheezy.

    The package calls for libpango-1.0-0, yet Debian Stable only provides libpango1.0-0 You have the correct name, but Debian hasn’t caught up yet.

    Reply
  5. Ti Post author

    Thanks for the information, lets see if i can investigate this further. But first i need to install Debian 🙂

    Reply
  6. Gabriele Vidali

    I suggest modifying the cleanup.linux.sh.
    Ubuntu’s /etc/resolv.conf file is a symbolic link to /run/resolvconf/resolv.conf so change it to:
    mv -f “$base/resolv.conf.backup” /run/resolvconf/resolv.conf

    Reply
  7. Ti Post author

    Hi,

    I do not modify the original files provided by fortinet, i just build the “easy2go” .deb package arround it. If you want to modify some files, please do after installation or use the original package from fortinet.

    I always use the latest original package provided by fortinet in their support area, you need an account to access it. But there are also plenty of other sites hosting this files. The official site http://forticlient.com should also provide the clients.

    Reply
  8. Francisco Prieto

    Thank you very much for these packages.

    IWorked like a charm in Ubuntu 14.10, but I just installed Ubuntu 15.04 (final release) and doesn’t work; it connects to tunnel but it doesn’t work at all…

    Hope there will be a new forticlient release soon…

    Thanks and best regards.

    Reply
  9. Giovanni Mellini

    Hi,
    First of all tks for packaging the FortiClient 🙂

    I just upgraded to Ubuntu 15.04 today and noticed that the FortiClient was not working.
    I did a bit of search in the code and found where the problem is and tested a patch against your last package (forticlient-sslvpn_4.4.2312-1_amd64.deb).

    Follow the patch, that is for sysconfig.linux.sh file (both in 32 and 64bit dir):

    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ diff -u sysconfig.linux.sh.SAVE sysconfig.linux.sh
    — sysconfig.linux.sh.SAVE 2015-04-25 08:01:16.993683848 +0200
    +++ sysconfig.linux.sh 2015-04-25 15:06:41.236863760 +0200
    @@ -62,7 +62,7 @@
    ifn=`route -n|grep “^1.1.1.1″|awk ‘{print $8}’`
    echo “interface $ifn” >> “$base/forticlientsslvpn.log”

    -addr=`ip addr show $ifn | grep “inet” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’`
    +addr=`ip addr show $ifn | grep “inet” | grep “brd” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’`
    echo “address $addr” >> “$base/forticlientsslvpn.log”

    echo “delete route 1.1.1.1” >> “$base/forticlientsslvpn.log”
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$

    As you can see the only thing to do is to add the
    grep “brd” |
    after
    grep “inet” |
    on row 65 of the script.

    The problem is the following with Ubuntu 15.04
    After the connection goes up and ppp0 interface is created (A.B.C.D is the IP address of SSL gateway)

    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ ip addr show ppp0
    13: ppp0: mtu 1354 qdisc pfifo_fast state UNKNOWN group default qlen 3
    link/ppp
    inet A.B.C.D peer 1.1.1.1/32 scope global ppp0
    valid_lft forever preferred_lft forever
    inet A.B.C.D/32 brd A.B.C.D scope global ppp0
    valid_lft forever preferred_lft forever
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$

    the script execute the following command (line 65) and store the output in $addr var:
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ ip addr show ppp0 | grep “inet” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’
    A.B.C.D
    A.B.C.D
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$

    as you can see with 15.04 you receive a double IP in 2 rows.

    After that the script fails on line 98 while executing
    route -n add default gw $addr
    because $addr is a multi line value and we see in the log the error reported in some comment:
    SIOCADDRT: No such device

    After the patch the command executed is the following:
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$ ip addr show ppp0 | grep “inet” | grep “brd” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’
    A.B.C.D
    gmellini@jellyfish:/opt/forticlient-sslvpn/64bit/helper$

    and the $addr var is now ok. Everything works fine 🙂

    I didn’t tested the patch in older Ubuntu version (14.10 or 14.04) where the original script where working but I’m pretty sure it’s ok, because the brd key is every time here.

    So can someone else test and if possible can you repackage your .deb with the patch included?
    Tks
    Giovanni

    Reply
  10. Ti Post author

    Okay, that script part was already once a problem in a former release of forticlient ssl-vpn. We contacted fortinet about the problem and they made the fix then in their official files available.

    I will contact Fortinet again, so we will have a clean release with that adjustment. Maybe i will release a special Package for Ubuntu 15.04, please be patient.

    Cheers
    Rene

    Reply
  11. Giovanni Mellini

    Hi Ti,
    I tried the new .deb package for 15.04 for 64bit (Forticlient SSLVPN 4.4.2312-2 64bit) and is not working.
    Is not working because the patched sysconfig.linux.sh inside 64bit/helper/ dir contains the wrong doble quotes around the brd word.

    In your script is:
    grep “brd”
    and shall be:
    grep “brd”

    I tested the new package on Ubuntu 14.04 (not in 14.10 because is not booting in VirtualBox) and I found that the right grep word to use to have the new package working in 14.04 (and 14.10 too probably) is “peer”.

    So the right patch is to change line 66 of sysconfig.linux.sh as follow:
    addr=`ip addr show $ifn | grep “inet” | grep “peer” | tr ‘/’ ‘ ‘ | awk ‘{ print $2 }’`

    This is tested and working on Ubuntu 14.04 and 15.04 64bit (32bit is the same).

    I noticed that the 32bit package for 15.04 is not patched so please include the fix in 32bit/helper/sysconfyg.linux.sh file.
    Last. The 32bit/ dir is inside 64bit package too; can be removed or just patch the script inside 32bit dir too.

    Tks again
    Giovanni

    Reply
  12. Giovanni Mellini

    Hi Ti
    wordpress converts the double quotes in a wrong way, so please refer to the quotes of the original grep “inet” syntax to fix the package.

    Giovanni

    Reply
  13. Giovanni Mellini

    Ti,
    I tested the new patch on Ubuntu 14.10 and is working fine too. So I think the last patch is ok for all Ubuntu version from 14.04 to 15.04

    Reply
  14. Ti Post author

    Hi,

    oh, sorry for that inconvenience. I just did “copy & paste” and it was late already 😀
    As that i released it as beta, i will fix this issues and release a new package soonest.

    Thanks Giovanni for your support.
    Rene

    Reply
  15. Fabian Kallmeier

    Worked for me on debian wheezy after forcing the install because of the error mentioned above:

    “The package calls for libpango-1.0-0, yet Debian Stable only provides libpango1.0-0 You have the correct name, but Debian hasn’t caught up yet.”

    For debians new stable (jessie) it should be fine I guess.

    Reply
  16. Francisco Prieto

    Confirmation: new version (Forticlient SSLVPN 4.4.2313 64bit) works in Ubuntu 15.04

    Best regards.

    Reply
  17. sanjay

    When installing on 12.04 i get dependency error:
    “Dependency not satisfiable: libpango-1.0.0”

    On 12.04, the package name is libpango1.0.0 not libpango-1.0.0

    Reply
  18. Marco

    Thanks mate 🙂
    worked almost flawlessly
    I had to manually install lib32gcc1 on my 64bit Ubuntu 14.04
    Other than this everything worked out just fine

    Reply
  19. Fábio

    Hello

    Using Debian 8 (Jessie), I’m having showlicense error when I accept the terms:
    showlicense: Fatal IO error 5 (Input/output error) on X server :0.

    Any idea?

    Reply
    1. Ravi

      I get this error as well in Debian 8. But running the command line client to start the vpn is working for me.

      Reply
    2. NaturalFork

      I am having the same issue. The command line version works fine, which is all I really need. I know this boils down to not having a certain package installed. I just forget which one it is.

      Reply
    3. Capita

      Hi folks ! I had the same issue that you have, and what I did was the following:
      Open a console as root and run /opt/forticlient-sslvpn/64bit/./helper/setup
      This setup script will show you the license, just press space bar and at the end, write yes and press Enter.
      That’s it, jsut open you forti client app and configure it. good luck.

      if you have any question write me an email beagleskywalker@gmail.com

      Reply
  20. Nahhaal

    Confirming that the provided .deb package works OK on LMDE 2 (betsie) [64bit]


    sudo gdebi forticlient-sslvpn_4.4.2313-1_amd64.deb

    Reply
  21. Damian

    Amazing!

    I’ve just installed the .deb and it worked right away.

    Thank you very much!
    D.

    Reply
  22. Juan M. Molina

    Installed and working flawlessly on Ubuntu 15.04 64bit. I didn’t need to do anything other than install the .deb package.

    Thank you very much!

    Reply
  23. Nikolay

    Hello,
    Did anyone have the following error?
    debug1: ssh_exchange_identification: FortiClient security check failed. Please retry connection using http for FortiClient security checking.
    I receive that when i try to ssh to a server over the VPN? Google doesn’t know anything…

    Reply
  24. fprietog

    Updated & working:
    Forticlient SSLVPN 4.4.2317 64bit @ Ubuntu 15.04

    Thank you very much for keeping us up to date!

    Reply
  25. Whenpigswifi

    This is great!

    Question, or maybe I missed it in the article, but I have been looking for a way to hook into the fortinet vpn via command line. Is there anything out there like this?

    Reply
  26. Ti Post author

    Hi Whenpigswifi,

    depends on what you want to do. This package also includes the forticlient CLI utility whereas you can use it for your shell scripts. Its located in /opt/forticlient-sslvpn/[your-arch]/forticlientsslvpn_cli . Please note that Fortinet only provides this file as binary, so you cannot edit the source code. In the folder “helper” are some .sh files located, maybe you can use them for your work.

    Cheers Rene

    Reply
  27. SilvioQ

    Hi! Thanks for the work. I tested on Debian Jessie and the client connects to server, but don’t create the tunnel.

    In Debian wheezy I used the forticlient client 22xx (Dec 2012) without troubles.

    Here is the log http://pastie.org/10383365

    Thanks in advance!
    Silvio

    Reply
  28. Rob G

    BTW… forgot to mention this is running great on Linux Mint 17.2 Cinnamon (14.04 Ubuntu).

    Reply
  29. Eder Fontalvo Melendez

    Excellent !!, very good. It works great on Ubuntu 14.04.1 with Gnome

    Reply
  30. Alex

    Hi, my setup does not start on Mint 17.2 KDE. Says: “This is first time you run forticlient ssl and you need the admin privilege to config”. Klick “ok” and the dialog to “accept the license agreement” is shown. “Accept”ed and than the (correct) root-password is given. Reaction: freezing “first time” window …
    I tried to install “ia32-libs-gtk” & “libgtk2.0-0:i386” & “xterm” manually – no way, not even an obvious shown error.
    Any ideas?
    Thanks !

    Reply
    1. Gabo

      Hi
      I have the same problem as you, Did you manage to install it?
      Could you install it? How did you do ?

      Help me please

      Reply
    2. Pavla

      Hi, I have exactly the same problem. I don’t know what to do :-(. If you will have any ideas, let me know, thanks 🙂

      Reply
  31. Vernier

    Working like a charm!

    I had to move the priority of dns up a bit to enable name lookups through the VPN. See following change to /etc/nsswitch.conf:

    diff /etc/nsswitch.conf.backup /etc/nsswitch.conf
    11c11
    hosts: files dns mdns4_minimal [NOTFOUND=return]

    Reply
  32. sasikumar

    Works like a charm on ubuntu 15.10. It fails to work with mobile data card (usbttymodem) because the service provider (I think some of them) is using pppd service and its locked and not accessible by forticlient.

    Reply
  33. diozen

    I dont know why but I dont have the entire routing table in my Kali Linux 2.0, when I use the old version I have almost 140 routes and now using the newest version I only have 57 routes.

    Any idea?.

    Reply
  34. Stephan P.

    Could you please provide a link to the original tar.gz? All links I found via Google are outdated.

    Reply
  35. Jan

    Help -> About… -> FortiClient SSLVPN 4.0.2323
    the current version is: Forticlient SSLVPN 4.4.2323 😉

    Thanks

    Reply
  36. Ti Post author

    This seems to be a inconsistency with the Fortinet package which is named 4.4.xxxx so i keep the name ; )

    Cheers
    Rene

    Reply
  37. Antônio Marcos

    In english Very good, in spanish Muy bueno, in french très bonne, but i am from Brazil, Rio de Janeiro, so Here we say “Show de bola”. Thanks man!

    Reply
  38. Peter

    Nice work!
    But I have noticed the following.
    If I unpack and compare the binaries from your package v 4.4.2317 with binaries from the tar.gz file (same version) from Fortinet they are different.
    Also when installing your package it is possible to run the FortiClient whit out sudo, whereas this is not possible with the files from the tarball from Fortinet

    Reply
  39. Ti Post author

    Hi Peter,

    it seems when packaging to a .deb file the binaries changes, i could not further investigate.

    Try on your own with the latest release .2323:
    1. Download the source package: https://hadler.me/files/ubuntu-forticlient-sslvpn.tar.gz
    2. Optional: If you want you can replace the binaries now with your own downloaded
    3. Build the package with: debuild -us -uc

    Cheers Rene

    Reply
  40. Lindsay

    Hi,

    I have run into a problem with Forticlient on Ubuntu 15.10. I can use dig and nslookup to resolve names inside the VPNed network and I can ping and connect to systems inside the VPNed network using the raw IP address but not by their FQDNs.

    I’ve tried all versions from 4.4.2312 to 4.4.2323 with the same result.

    Any clues anyone?

    Reply
    1. Ti Post author

      I am already working on an apt-repo, but will take some time until release. Stay tuned : )

      Reply
  41. Matthias Braun

    Hi and thanks a lot for the packages!

    Is there a way to import a .conn, .sconn, .vpl, or .vpz file into the Forticlient?

    Thanks in advance!

    Reply
    1. Ti Post author

      Hi Matthias,

      unfortunately no, the linux sslvpn only provides very limited functionality.

      The configuration is saved in ~/.fctsslvpnhistory , maybe this helps you.

      Cheers Rene

      Reply
  42. rohit

    Is there any way to use this on fedora 23 ? I tried converting it to rpm package, didn’t work.

    Reply
    1. Ti Post author

      Hi Rohit,

      Fortinet only provides a generic tar.gz file and i repackage it for Debian/Ubuntu.

      So it should be fine if you unpack the deb package and copy it manually to your /opt directory.

      Cheers
      Rene

      Reply
    2. Dag Olav Prestegarden

      First of all: Thank you very much for this package Rene, it’s much appreciated 🙂

      @rohit:

      I had the same problem as you and managed to get it working using the following procedure::

      1: Convert the deb-file to rpm using alien: alien -r forticlient-sslvpn_4.4.2329-1_amd64.deb (the resulting rpm will not work as it supplies paths that collides with Fedoras filesystem package)
      2: Edit the rpm using rpmrebuild: rpmrebuild -pe forticlient-sslvpn-4.4.2329-1.x86_64.rpm
      3: Remove the lines at the bottom of the file that tries to supply the folders that already exists in your base filesystem. In my case, this was:

      %dir %attr(0755, root, root) "/"
      %dir %attr(0755, root, root) "/opt"
      %dir %attr(0755, root, root) "/usr"
      %dir %attr(0755, root, root) "/usr/share"
      %dir %attr(0755, root, root) "/usr/share/applications"
      %dir %attr(0755, root, root) "/usr/share/doc"

      4: The resulting file worked fine, and installed fine using dnf. The installed program tested and worked fine on my Fedora 24 64bit system.

      Reply
  43. Cody S

    This is awesome. I’ve been migrating things from Ubuntu 9.10 to 14.04 and the forticlient that I brought over didn’t seem to work out very well. While Forticlient didn’t offer me much help in the ways of documentation to troubleshoot the issue, simply installing this deb and using that fixed my problem. Thank you.

    Reply
  44. Alberto

    When I Installed this package I’m getting this error “Setup Failed”. Currently I’m using Debian 8

    Any idea???

    Reply
  45. kushieda

    Is there a way to disable the client from modifying my resolv.conf file? I run a local dnsmasq cache that already handles the VPN name servers and would like to prevent it from changing it.

    Reply
  46. C Bille

    Hello,
    i cannot configure the client on the first run. Demands the root password and does not accept it. Any clues ? I tried with several keymaps but cannot find which one use. Qwerty, Qwartz, Azerty ?
    Thanks

    Reply
  47. Adeildo

    Gostei…. tive dificuldade com o pacote FortiClient SSLVPN 4.0.2312 no ubuntu 14LTS, problema com permissão no arquivo /home/user/.fctsslvpnhistory, mas resolvi com chown.

    Reply
  48. Patricio Ascencio

    Hi,

    Do you have de tar.gz from generic package. I need it for fedora.

    Thanks!

    Reply
    1. Eugen

      Hi,

      yes it work for me on 16.04 but i install it manually.
      unzip the deb package and put the opt directory into your opt directory.
      i try it with the 4.4.2312-3 66 bit version because the newer versions doesn’t work for me.

      Reply
    2. Ti Post author

      Hello,
      manual install by “dpkg -i ” on CMDline shoud work. I will further investigate this and will release 16.04 compatible packages.

      Reply
  49. Luis Enrique

    Hi

    I installed Forticlient SSLVPN 4.4.2327-2 64bit deb package , and somehow it didn’t appear on desktop space , but it was there. For ubuntu 16.04 just searching on /usr/share/applications and putting the fortinetclient-sslvpn.desktop on the bar and work without issues.

    Maybe the problem is on ubuntu side cause the same issue was with virtualbox. Semthing weird
    thank you for your work , i appreciate that , cheers !

    Reply
  50. Robert Simpson

    Hello there.. I just installed this on a new Debian 8 machine and can create a connection via an SSH session. The connection takes over the session so I created another SSH session and tried to ssh to a remote switch and it did not work. I am assuming that the connection does not share connections with other sessions. I do not intend to use this locally with a desktop but only through SSH connections.
    Any pointers

    Reply
  51. Guido Estevez

    Hi,
    I´m using Ubuntu 16.04 64 in a VirtualBox machine with Forticlient SSLVPN 4.4.2327-2 64bit

    The connection failed after few seconds. When the Bytes sent: count 945

    Status: Connected
    Bytes received: 163
    Bytes sent: 945

    Any idea?
    Thank you very much in advance

    Reply
    1. Ti Post author

      Hi, the only difference is that the new builds are dependent on Ubuntu 16.04 packages. It may also run on Ubuntu 14.04 but i did not test. Also there is still the same forticlientsslvpn package version, so to be save use the 14.04 build as there is no benifit to use the Ubuntu 16.04 build.

      Cheers Rene

      Reply
    1. Pavel Katovich

      /opt/forticlient-sslvpn/64bit/forticlientsslvpn_cli –server host:port –vpnuser username

      Reply
  52. Andrea

    Hi, I’m running Debian 8 (if I read correctly on Kernel 3.16.0.4) on VM using VMWare.
    The installation is been concluded succesfully, but when I try to run the Forticlientsslvpn, I put the Root pwd but by cliccking “Agree” on Licence form, the form “First run” won’t load correctly and shown only a gray form.
    any idea?

    Reply
    1. Ti Post author

      Hi, try to start the program several times. I had this problem too on some machines but didnt figure out what causes the problem.

      Cheers Rene

      Reply
  53. Dio

    Hi, my setup does not start on Ubuntu 14.04 LTS. Says: “This is first time you run forticlient ssl and you need the admin privilege to config”. Click “ok” and the dialog to “accept the license agreement” is shown. “Accept”ed and freezing on the “first run” window …

    Any ideas?
    Thanks !

    Reply
    1. Ti Post author

      Hi, you tried already starting several times?

      My workmate had the same problem, but after some more startups it worked.

      Reply
    2. brad

      I had the same problem, first run GUI wouldn’t accept my correct root password several times. What I did was:
      I’m using forticlient-sslvpn_4.4.2330-1_amd64.deb (installation with dpkg was ok)
      and Debian testing stretch

      1) execute:
      myUser@myHost:~$ /opt/forticlient-sslvpn/64bit/helper/setup.linux.sh
      Need root privilege to continue the setup, trying sodu…
      [sudo] password for myUser:
      Sorry, user myUser is not allowed to execute ‘/opt/forticlient-sslvpn/64bit/helper/setup.linux.sh 3’ as root on myHost.
      /opt/forticlient-sslvpn/64bit/helper/setup.linux.sh: line 29: /opt/forticlient-sslvpn/64bit/helper/forticlientsslvpn.install.log: Permission denied
      it seems that ‘sudo’ does not work here, try to use ‘su’
      Password:
      Here I used my root password and it was accepted, then I agreed EULA

      2) Then:

      myUser@myHost:~$ /opt/forticlient-sslvpn/64bit/forticlientsslvpn_cli -server vpnServer:vpnPort -vpnuser vpnUser
      Password for VPN:

      after give vpnuser password and accept certificate it worked 🙂

      STATUS::Login succeed
      STATUS::Starting PPPd
      STATUS::Initializing tunnel
      STATUS::Connecting to server
      STATUS::Connected
      Press Ctrl-C to quit
      STATUS::Tunnel running

      Then it also worked on GUI

      Reply
  54. Anders Bolager

    Thanks a lot. If I knew how, a six-pack would be on your way. (Oh, yeah, I hope you like micro brewed beer 🙂 )

    Reply
  55. Dave

    Installed on CentOS 6.8 x86_64 using alien to convert to rpm. It required several i686 compatibility libraries not present by default on CentOS 6.8.

    1. Install CentOS 6.8 x86_64
    2. Install EPEL Repo

    sudo yum install epel-release

    3. Install Nux Desktop (apparently required to get alien)

    sudo rpm -Uvh http://li.nux.ro/download/nux/dextop/el6/x86_64/nux-dextop-release-0-2.el6.nux.noarch.rpm
    yum update && yum install alien

    Borrowed from: http://www.tecmint.com/convert-from-rpm-to-deb-and-deb-to-rpm-package-using-alien/

    4. Install missing libraries

    sudo yum install gtk2-2.24.23-8.el6.i686 gdk-pixbuf2-2.24.1-6.el6_7.i686 glib2-2.28.8-5.el6.i686 glib2-2.28.8-5.el6.i686 libSM-1.2.1-2.el6.i686 libX11-1.6.3-2.el6.i686 libXinerama-1.1.3-2.1.el6.i686 libgcc-4.4.7-17.el6.i686

    5. Convert .deb to .rpm

    cd /path/to/deb
    sudo alien –to-rpm –scripts forticlient-sslvpn_4.4.2329-1_amd64.deb

    6. Install .rpm

    rpm -ivh forticlient-sslvpn-4.4.2329-2.x86_64.rpm

    7. Locate and Invoke Forticlient SSL VPN application

    Applications=>Internet=>Forticlient SSL VPN (In my case)

    8. Do a little dance, drink a little beer, be happy 🙂

    Reply
  56. Pingback: forticlientsslvpn doesn't work with a proxy on Cent OS 7 * VPN SSL Online

  57. Pingback: Linux da MSSQL GUI Bağlantı, FortiClient VPN, Remote Windows Uygulaması (Ubuntu, Kali .deb destekli) | mekân-ı erkân

  58. bpresles

    I’m using latest 4.4-2329-1 version on Ubuntu 16.04.1 64 bits, and it stops working after a few seconds. Apparently someone else had this issue, but nobody has replied to help him.

    Anyone having this issue was able to fix it?

    Reply
    1. fprietog

      @bpresles

      You may have a clue about what’s happening in the log files:
      /opt/forticlient-sslvpn/64bit/helper/forticlientsslvpn.log
      /opt/forticlient-sslvpn/64bit/helper/pppd.log

      (or in /opt/forticlient-sslvpn/32bit/helper if tou’re using 32 bits OS)

      Reply
  59. Martin

    Your SSLVPN-forticlient package is running without an Problem since 2012 under my Debian at home. Thank you very much for your great work!
    Now I’d like to install the same software on my laptop, an arm V7 samsung chromebook XE303C12 with an Samsung Exynos 5250 Dual 1.7 GHz + ARM Mali-T604, with ArchLinux. Unfortunately there are no sources availible (for me) nor any pre-compiled packages. Do you have any solution for this problem?

    Reply
  60. Juansoft

    Thanks you very vey very much for this brilliant .deb package!!

    Running you’re FortiClient VPN SSL program in Lbuntu 16.04.1 LTS without any problem!!

    Reply
  61. John

    Hi – really appreciate you building these packages. Big help in enabling me to start to migrate some company machines to running linux instead of Windows 🙂 However, one question about the program. Are you making any changes to the default FortiClient software to accommodate being packaged for Linux? The reason I ask is because I have purchased and installed an SSL certificate for my FortiGate 100D firewall for the VPN. People who connect from the Windows edition of FortiClient work perfectly, it recognises the certificate and connects, no problem. But people running Linux and connecting using this package always get the warning about an invalid certificate. The VPN still connects, but only after they click the button to ignore the certificate warning and continue. Running Linux Mint 18 64bit.

    Reply
    1. nikanik

      Hi,
      the same problem, but more worse, it’s not agree to ignore an invalid certificate.

      Reply
  62. old fart

    Works great with Mint 17.3 and 18. Only problems have been that password does not stay saved for long time and also .fctsslvpnhistory file gets corrupted sometimes and needs to be deleted or to keep copy of it and replace it.

    Reply
  63. Ravi

    Would you like to move it to Github, so people can contribute and issues can be tracked. Would be great for those who are stuck with Forticlient and don’t have Mac or Windows OS.

    Reply
  64. clark lewis

    Thoughtful blog post . I loved the insight , Does anyone know where my business could get access to a fillable USPS PS 1000 copy to complete ?

    Reply
  65. Pingback: Forticlient SSLVPN packages for Ubuntu/Debian – Scubarda

  66. fprietog

    Thank you very much for keeping us updated!
    New versión 4.4.2330-1 64 Bits working as expected under Ubuntu 16.10.

    Reply
  67. Anhydrous

    Thank you for sharing these!! I’ve used alien and rpmrebuild to adapt it for my rhel workstation.. thank you!

    Reply
  68. Amine

    Thanks for the tip.
    It’s work for me in ubuntu 14.04 installed in a VM. the problem is that VM became unreachable in my local netword (no ping, no ssh connexion).

    The problem can be caused by my cloud network conf or by the VPN client?

    Reply
    1. Ti Post author

      Hi, it seems like you set your default route trough the vpn-tunnel. Normally you get the routes from Fortigate when connecting. Make sure you set up “Split-Tunneling” on your Fortigate for your Tunnel.

      Reply
  69. Andrew

    I’m having trouble finding any instructions on how to use this. What file should I be selecting as certificate? Whichever .crt or .pem I pick results in “invalid pkcs#12 file” error.
    Also what password..? I don’t get asked this in Windows.

    Reply
    1. Ti Post author

      Certificate is not mandatory if not configured on your endpoint. Just leave the fields blank.

      Reply
    1. Ti Post author

      Hi, this is only valid for Windows/MAC versions. Version 4.4.2331 is the latest for Linux.

      Reply
  70. Ergan

    It drops saved connections configuration from time to time. Where is this data stored, so I can backup the file?

    Reply
  71. julian

    so where’s the source for the linux client?
    not planning on running untrusted software on my boxes if I can help it..
    (and before you say but it’s fortinet of course you trust them… No, actually )

    Reply
    1. Ti Post author

      Hello,

      there is no source for the official Fortinet linux-client, only Fortinet has it. As i mentioned I only repackage it into a .deb package, no changes on original files.

      But there is also an open-source alternative for that: https://github.com/adrienverge/openfortivpn

      I am working on a GUI for this CLI-only Program. So stay tuned or compile yourself.

      Cheers

      Reply
  72. defcon

    Works on ubuntu 17.04 with Wayland, had to use wsudo to launch initial setup though, but all good now 🙂

    Reply
  73. seenureddy

    Is it possible to automate this connection ? My client side VPN connection is disconnecting continuesly. I want to auto mate the process when ever it’s disconnects need to connect it again. I want to try with the python. Please help me on this.

    Reply
  74. Javier

    Hi, I’m trying to use the client, and I get this error: “Failed to parse fortisslvpn page.”, I have no idea about what this mean, Could you give some help?

    Thanks!

    Reply
  75. Azizasm

    works like charm

    in ubuntu install :;
    sudo dpkg -i openfortigui_0.2.10-1_i386.deb

    Reply
  76. TucxMind

    Look forward to trying your: OpenFortiGUI.

    However for the current tool, FortiClient SSL; where would I find the config files for this once installed? I love this tool and use it daily in my Mint system, however there is occasion if my system crashes while the program is loaded / active, where I lose the profile that was active / live during that crash. That, and/or if I want to switch to another install / machine.

    Where would be a good place to ‘backup’ the config / data for this app.

    Thanks in advance. ~TucxMind

    Current OS: Mint 17.x

    Reply
    1. TucxMind

      Ended up noticing this was ans a month later in another reply (above); in case missed by others… ‘config location’ is (in your home directory): /home/.fctsslvpnhistory

      File name:
      .fctsslvpnhistory

      Not sure if this is the same for the new OpenFortiGUI.
      _______________________

      To restore / reimport. Just re- / install the .deb package, and then place your backed up .fctsslvpnhistory file in the home directory.

      Reply
  77. Joel

    Just to keep it registered here what Capita said at 22/03/2017 at 01:15, if after an update you receive a “Setup Failed” message just run the setup again directly from its folder on the console with “sudo /opt/forticlient-sslvpn/64bit/helper/setup”, read and agree with the license and you’re ready.

    Reply
  78. Joby

    Hi please help i get the following message on my ubuntu 16.4 64bit
    sudo openfortivpn -vvv
    DEBUG: Loaded config file “/etc/openfortivpn/config”.
    DEBUG: Config host = “example.com”
    DEBUG: Config realm = “”
    DEBUG: Config port = “8443”
    DEBUG: Config username = “name”
    DEBUG: Config password = “********”
    DEBUG: Gateway certificate validation failed.
    DEBUG: Gateway certificate digest found in white list.
    INFO: Connected to gateway.
    ERROR: Could not authenticate to gateway (No cookie given).
    INFO: Closed connection to gateway.
    DEBUG: Gateway certificate validation failed.
    DEBUG: Gateway certificate digest found in white list.
    INFO: Logged out.

    Reply
  79. Red

    Thank you, it works fine. But I have to enter my credentials every time ! How to solve this?

    Reply
  80. hhllss

    Hello,
    I have a problem here while installing the latest package, I did not have that problem before (and I am missing OTP on your brand new OpenFortiGui which seems great !) :
    Lintian check results for /home/hlestrat/Téléchargements/forticlient-sslvpn_4.4.2333-1_amd64.deb:
    E: forticlient-sslvpn: control-file-has-bad-owner md5sums rene/rene != root/root
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid opt/ 1000/1000
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid opt/forticlient-sslvpn/ 1000/1000
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid opt/forticlient-sslvpn/32bit/ 1000/1000
    E: forticlient-sslvpn: wrong-file-owner-uid-or-gid … use –no-tag-display-limit to see all (or pipe to a file/program)
    E: forticlient-sslvpn: md5sum-mismatch opt/forticlient-sslvpn/64bit/helper/printcert
    E: forticlient-sslvpn: md5sum-mismatch opt/forticlient-sslvpn/64bit/helper/setup
    E: forticlient-sslvpn: md5sum-mismatch opt/forticlient-sslvpn/64bit/helper/showlicense
    E: forticlient-sslvpn: md5sum-mismatch … use –no-tag-display-limit to see all (or pipe to a file/program)

    What am I doing wrong ?

    Best regards,

    Hervé

    Reply
  81. Pingback: Ubuntu development environment setup – kursluzz

  82. Pingback: Acesso remoto – VPN | Monolito Nimbus

  83. Pingback: Connecting SSL VPN FortiGate using Fedora 24 | >> IT UnderStandings <<

  84. Pingback: Ubuntu development environment setup – kursluzz – open source tech blog

Leave a Reply

Your email address will not be published. Required fields are marked *