MSI file for FortiClient VPN

VPN
1

Hi Guys

Want to deploy the FortiClient VPN via Intune so I dont have to manually install an .exe on each client machine (Windows 10)but I need an .msi to do so, and the link below seems to only offer .exe’s

https://links.fortinet.com/forticlient/win/vpnagent

Is there an .msi of this file that I can grab?

thanks in advance

2

Start the install, grab the files from appdata temp I believe is where I got the msi files

3

You can either use something like 7-Zip to see if it contains an MSI.

Or you wrap it using a process like this for Intune: Robin Hobo - Microsoft | LinkedIn

4

Go to https://filestore.fortinet.com/forticlient/

You will get an XML.

<Contents>
<Key>downloads/FortiClientSetup_6.4.4.1655_x64.zip</Key>
<LastModified>2022-10-22T03:31:52.786Z</LastModified>
<ETag>"6b91542a43916ee30edbe8f871241fb6-9"</ETag>
<Size>141907875</Size>
<Owner>
<ID>
02d6176db174dc93cb1b899f7c6078f08654445fe8cf1b6ce98d8855f66bdbf4
</ID>
<DisplayName>minio</DisplayName>
</Owner>
<StorageClass>STANDARD</StorageClass>
</Contents>

Find the key FortiClientSetup_VERSION_x64.zip.

Create the URL

https://filestore.fortinet.com/forticlient/ + the key that you get. FE:

https://filestore.fortinet.com/forticlient/downloads/FortiClientSetup_6.4.4.1655_x64.zip

Inside that zip you will get the MSI.

5

FYI, Forticlient VPN stores configs in the registry, so you should be able to either package a registry key with the msi or push it out with intune

6

This is no longer accurate. The most recent versions of the free FortiClient VPN MSI are now located in C:\ProgramData\Applications\Cache\{GUID of installer}\{version number}

The path for version 7.0.5.238 is C:\ProgramData\Applications\Cache\{2C4B3A44-AE16-4D4A-87F7-32016C4AEB18}\7.0.5.0238

7

%temp% is your shortcut

8

you genius. thank you sir

9

The Installer is an online installer, but you can retrieve the msi from appdata while in wizard.

10

This returns 403 forbidden now :confused:

11

2 years later, still the correct solution

12

Not before its installed It won’t, afterwards yes or during a repair

13

This is the new path for v 7.0.6.0290
C:\ProgramData\Applications\Cache\{CAE02F27-4AC1-473B-B78A-179183D2AFFD}\7.0.6.0290

14

When using MSI in intune did you leave the command line empty or put something in?

15

EMS generates MSI installers + it can manage work-group (non domain) PCs as well. (though the initial will obviously need to be manual or scripted by you in some way, since you can’t rely on GPO)

16

When the MSI is opened after using the online installer from the Fortinet site, the MSI gets created there. You don’t need to install to get the MSI - just have the MSI installer open, and then navigate to that folder

17

Path for 7.0.7.0345

C:\ProgramData\Applications\Cache{32123CA3-C24D-4A99-9347-70049B8E4C23}\7.0.7.0345

18

Path for 7.4.0.1658

C:\ProgramData\Applications\Cache{0DC51760-4FB7-41F3-8967-D3DEC9D320EB}\7.4.0.1658

The switches that you need to install quietly with no restart are:

/quiet /norestart

19

I thought FCT required a restart after install?

Our endpoint team has always had heartburn about upgrading FCT due to the “required” restart

20

I’m honestly not sure. My sample size is too small to know. I do know that when i silently install it remotely, I dont want the users computer to restart. I’ve never got a complaint, then again most of my users only sporadically work remotely