Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Weatherlights
New Contributor

FortiClient 6 won't auto connect while 5 would

I am currently working with the new FortiClient 6 and I tried to use the same configuration file as in version 5. We configured auto connect based on a certificate with version 5 and it always auto connected fine. Now with version 6 the client does not autoconnect anylonger instead the GUI shows up and wants me to click connect.

This is my configuration (basically):

<forticlient_configuration>
<vpn>
        <options>
            <current_connection_name>company AON</current_connection_name>
            <current_connection_type>ssl</current_connection_type>
            <autoconnect_tunnel>company AON</autoconnect_tunnel>
            <autoconnect_only_when_offnet>0</autoconnect_only_when_offnet>
            <keep_running_max_tries>30</keep_running_max_tries>
            <disable_internet_check>0</disable_internet_check>
            <save_password>1</save_password>
            <minimize_window_on_connect>0</minimize_window_on_connect>
            <allow_personal_vpns>0</allow_personal_vpns>
            <disable_connect_disconnect>0</disable_connect_disconnect>
            <show_vpn_before_logon>1</show_vpn_before_logon>
            <use_windows_credentials>1</use_windows_credentials>
            <use_legacy_vpn_before_logon>0</use_legacy_vpn_before_logon>
            <show_negotiation_wnd>0</show_negotiation_wnd>
            <vendor_id />
        </options>
        <sslvpn>
            <options>
                <enabled>1</enabled>
                <prefer_sslvpn_dns>0</prefer_sslvpn_dns>
                <dnscache_service_control>0</dnscache_service_control>
                <use_legacy_ssl_adapter>0</use_legacy_ssl_adapter>
                <preferred_dtls_tunnel>0</preferred_dtls_tunnel>
                <no_dhcp_server_route>0</no_dhcp_server_route>
                <no_dns_registration>0</no_dns_registration>
                <disallow_invalid_server_certificate>1</disallow_invalid_server_certificate>
            </options>
            <connections>
                <connection>
                    <name>company AON</name>
                    <server>vpn.company.com:443</server>
                    <username />
                    <single_user_mode>0</single_user_mode>
                    <ui>
                        <show_remember_password>0</show_remember_password>
                        <show_alwaysup>0</show_alwaysup>
                        <show_autoconnect>0</show_autoconnect>
                    </ui>
                    <password />
                    <certificate>
                        <common_name>
                            <match_type>
                                <![CDATA[wildcard]]>
                            </match_type>
                            <pattern>
                                <![CDATA
  • ]>
                                </pattern>
                            </common_name>
                            <issuer>
                                <match_type>
                                    <![CDATA[simple]]>
                                </match_type>
                                <pattern>
                                    <![CDATA[company CA]]>
                                </pattern>
                            </issuer>
                        </certificate>
                        <warn_invalid_server_certificate>1</warn_invalid_server_certificate>
                        <prompt_certificate>0</prompt_certificate>
                        <prompt_username>0</prompt_username>
                        <fgt>1</fgt>
                        <keep_running>1</keep_running>
                        <on_connect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_connect>
                        <on_disconnect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_disconnect>
                    </connection>
                    <connection>
                        <name>company SSL-VPN</name>
                        <server>vpn.company.com:443</server>
                        <single_user_mode>0</single_user_mode>
                        <ui>
                            <show_remember_password>0</show_remember_password>
                            <show_alwaysup>0</show_alwaysup>
                            <show_autoconnect>0</show_autoconnect>
                        </ui>
                        <password />
                        <prompt_username>1</prompt_username>
                        <fgt>1</fgt>
                        <keep_running>1</keep_running>
                        <on_connect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_connect>
                        <on_disconnect>
                            <script>
                                <os>windows</os>
                                <script>
                                    <![CDATA[]]>
                                </script>
                            </script>
                        </on_disconnect>
                    </connection>
                </connections>
            </sslvpn>
        </vpn>
    </forticlient_configuration>
  •  

    And this is what I get on startup instead of the autoconnect: [link=https://forum.fortinet.com/post.aspx?forumID=5] Sample.jpg [/link][strike][/strike]

    1 REPLY 1
    Weatherlights
    New Contributor

    Could this be known issue 510735?

    6.0.2RC1 Fails to connect to VPN from Task tray with usercert authentication it prompts for certificate

    Labels
    Top Kudoed Authors