Forticlient Deployment and Troubleshooting

Deploy Forticlient and Connections via Intune

1. Open Intune in a browser window with elevated Admin privileges.
   
   
2. Go to Users and find the user's profile. In Groups, add the security group(s) UK - SSO VPN MFA and/or FR - SSO VPN MFA.
   
   
3. Go to Groups and find Forti VPN Deploy. 
   
   
4. Go to Members and Add Members. 
   
   
5.  DO NOT SELECT THE USERS PROFILE - THIS DEPLOYMENT MUST BE BY DEVICE ONLY. 
   
   
6. Find the users device (ensure it is the correct one as there are many older records) and Select it. 

This will take some time to show through, as the device has to check in with Intune. You can check the status and troubleshoot by going to Intune > Apps and searching for either the Forticlient package, or EP SSO VPN Connections and checking the device install status. 

Manual Deployment

1. Ensure the user is in the security group(s) UK - SSO VPN MFA and/or FR - SSO VPN MFA. 
   
   
2. On the user's device, set up VPN connections in Forticlient using these details:

If the client doesn't open a browser to trigger Azure authentication, there is something wrong with Forticlient. Check the version is up to date. 

Remove the connection, fully shut down Forticlient, reboot, then open Forticlient and set the connection up again.