Fixes Forticlient 7.0.7

forti-fix.sh

#!/bin/bash
# version 2 thanks to @dhx-mike-palandra

echo "Creating /etc/NetworkManager/conf.d/99-forticlient.conf..."
sudo cat > /etc/NetworkManager/conf.d/99-forticlient.conf << 'EOF'
[keyfile]
unmanaged-devices=interface-name:~vpn*,type:tun
EOF

if [ $? -eq 0 ]
then
  echo "Successfully created config file. VPN connection should work now."
else
  echo "Failed to create config file! Try running this script with root permissions."
fi

My hero 🦸 works for fedora 38!

I have fedora 38 as well, but it does not work for my case. I run this script after this I run forticlientvpn. Could you tell me what I did wrong?

Are you using the same forticlient version? 7.0.7
Are you having the same error? Config routing table failed

Name : forticlient
Version : 7.0.7.0246
Release : 1.el7
Architecture: x86_64

Take a look at the logs, I have no clue what's going on

Amazing job, @SydoxX. Many thanks for it! It actually works on Forticlient 7.0.7.0246 and helped me a lot.

Thank you so much!

Try this fragment stored in /etc/NetworkManager/conf.d/99-forticlient.conf:

[keyfile]
unmanaged-devices=interface-name:~vpn*,type:tun

Worked for me on Fedora 38 with FortiClient 6.4. See also: NetworkManager.conf(5)

this configuration line fixed the problem on my Ubuntu 23.04, and it is cleaner than the (good hack) script.
Thanks a lot!

Updated script to @dhx-mike-palandra's solution which is a lot sleeker. Thanks a lot!

Thanks for this good fix, really helped us on last weeks !

Just noticed that the working version of FortiClient VPN only for last Debian/Ubuntu revs is available to download on our Fortinet Customer Account in the Support Portal : forticlient_vpn_7.2.1.0700_amd64.deb file
The public Fortinet website only give the forticlient_vpn_7.0.7.0246_amd64.deb who has this bug...

I just opened a support ticket at Fortinet Support asking them to update the FortiClient VPN Debian download link on public website...
Waiting for greats news about this...

Hi,
Thanks for the script work perfectly
But i can't aceess to my lan network

Thanks!
Works excellent! So useful!
(Maybe it's necessary to reboot the system)

@dhx-mike-palandra @SydoxX

Can you update the script to request the user to reboot, or restart NetworkManager?

sudo systemctl restart NetworkManager.service

Also, I'm curious, why does your hackish script work? As far as I can tell, it tells NetworkManager to treat 'vpn' interfaces and 'tun' devices as unmanaged, but I don't understand how NetworkManager can interfere with FortiClient

@dhx-mike-palandra @SydoxX

Can you update the script to request the user to reboot, or restart NetworkManager?

sudo systemctl restart NetworkManager.service

Also, I'm curious, why does your hackish script work? As far as I can tell, it tells NetworkManager to treat 'vpn' interfaces and 'tun' devices as unmanaged, but I don't understand how NetworkManager can interfere with FortiClient

Thank you guys!, you save my day!!

Guys, there is a checkbox regarding "invalid certificates" in Options, and a drop-down list too. .)

Friends, the script works for me in PepperMintOS and FortiClient 7.0.7. Thanks a lot

Life saver, worksss

using forticlientvpn 7.0.7.0246
worked after running script and restartinng NetworkManager :)

./forti-fix.sh 
systemctl restart NetworkManager

Works for opensuse

Forticlientvpn 7.0.7.0246
Debian 12

worked after

./forti-fix.sh
systemctl restart NetworkManager
reboot

Thans guys, the script works for me With
./forti-fix.sh
systemctl restart NetworkManager

in LMDE 6 (Faye - Debian 12.1 ) and FortiClient 7.0.7.0246 Thanks a lot

This sorted my issues on Fedora 38.

I use an OpenConnect VPN as well and the original configuration line did cause problems with that. To tighten up the NetworkManager match, you may want to change the line to:

unmanaged-devices=interface-name:~vpn00*,type:tun

This assumes that Fortinet creates all its interfaces starting with vpn00 for you like it does on my device. This way it won't affect VPNs created with OpenConnect which are usually vpn0, vpn1, etc.

Any luck with Fedora 39?

Hi all, if you are facing issues with Forti's own client, I can recommend openfortivpn

Hi all, if you are facing issues with Forti's own client, I can recommend openfortivpn

Unfortunately, I need the SAML Login which upon my knowledge is not supported by openfortivpn.

You can try openfortivpn-webview. openfortivpn has a link to SAML in their README

Thanks! Ubuntu 23.10 works!

Dosen't work on ubuntu 23.10 / FortiClient VPN 7.2.2.0753 :(

Works on kali 2023.4 . Thank you very much !

The script worked perfectly with FortiClient VPN 7.0.7.0246 but it does not work with version 7.2.2.0753. My OS is Debian 12.