Here's how to disable FortiClient daemon automatic startup on a Mac:
Tested on:macOS 10.13.3, FortiClient 5.6.6
Reference materials:FortiClient Administration GuideFortiClient XML Reference Guidelaunchd tutorial System changes made: /Library/LaunchAgents/com.fortinet.forticlient.credential_store.plistChange RunAtLoad key from true to false, and add false parameter below KeepAlive key...
<key>RunAtLoad</key> <false/> <key>KeepAlive</key> <false/> /Library/LaunchAgents/com.fortinet.forticlient.fct_launcher.plistChange RunAtLoad key from true to false...
<key>RunAtLoad</key> <false/> A before/after comparison of running processes after reboot will demonstrate successful changes: Before, with FortiClient auto-started (with leading columns
cut out for ease of display)...
$ ps aux | grep -i forti | cut -d \/ -f2-Library/Application Support/Fortinet/FortiClient/bin/fctappfwApplications/FortiClient.app/Contents/Resources/runtime.helper/FortiClientAgent.app/Contents/Resources/runtime.helper/FctMiscAgent.app/Contents/MacOS/FctMiscAgentLibrary/Application Support/Fortinet/FortiClient/bin/epctrlLibrary/Application Support/Fortinet/FortiClient/bin/ftgdagentLibrary/Application Support/Fortinet/FortiClient/bin/fctservctlApplications/FortiClient.app/Contents/Resources/runtime.helper/FortiClientAgent.app/Contents/MacOS/FortiClientAgentLibrary/Application Support/Fortinet/FortiClient/bin/CredentialStore$ After reboot, the same grep should return zero process results (other than your grep process), and the tray icon will no longer be loaded.
$ ps aux | grep -i forti$
post edited by ChrisFGT - 2018/03/16 08:55:10