FortiClient VPN Installation Guide - Personal Devices and Vendors

ITS supports the “FortiClient VPN” client for students, employee personal devices, and authorized vendors to securely access UM-Flint campus resources off-site. This provides a way to connect to university servers and network resources that are otherwise not accessible over the Internet. This SSLVPN client works similarly to ITS’ previous VPN’s Ivanti and Pulse Secure. Please note that this is a “split tunnel” VPN, meaning it will only activate when you are accessing UM-Flint resources that are hosted on-campus.

Intended Audience

This article is intended for current students, authorized vendors, and other non-university employees who wish to install Forticlient on a personal device.

Note: If you are installing Forticlient on a university-owned computer please follow the instructions found here: FortiClient for university-owned devices

Requirements

Using the FortiClient SSLVPN requires a personal device with an Internet connection. The computer must not have an end-of-life operating system (such as Windows 7, Windows 8, macOS 10, etc.)

Installing and Configuring FortiClient SSLVPN

1. Download the FortiClient VPN client for your operating system at the following link: https://www.fortinet.com/support/product-downloads#vpn. For Linux users that wish to use a package manager, skip to Step 2c.
   1. Please ensure you are downloading the installer under the “FortiClient VPN” section, not any of the others. The screenshot below shows the proper section.
      
      
      
       
2. Install the FortiClient. Follow the instructions for your operating system below. This should be the most recent FortiClient 7.2 version.
   • Windows 10 and Windows 11
   • macOS
   • Linux (using your package manager)
   • Linux (using the installer from Step 1a)
3. After the FortiClient VPN is first installed, it must be configured. The steps are below, or you can use the configuration picture below as a reference.
   • Click Configure VPN
   • For “VPN” ensure SSL-VPN is selected
   • For “Connection Name” enter UM-Flint and leave Description blank. These can be named anything you prefer.
   • For “Remote Gateway” enter sslvpn.umflint.edu
   • Click the check box next to Customize Port, and then enter 10443 in the text box.
   • Click the check boxes next to “Enable Single Sign On (SSO) for VPN Tunnel” and “Use external browser as user-agent for saml user authentication”
   • Click Save
      

Using the FortiClient VPN

1. Once it is configured per the previous section, click Connect on the FortiClient. 
2. FortiClient will open your web browser, and you should see the UM-Flint Weblogin screen. Log in using your uniqname and UMICH Password, then complete the Duo prompt.
3. Your browser should show a “VPN Connecting” screen, and the FortiClient will begin connecting. When it is complete, the FortiClient will display your VPN IP address, uniqname, and other details shown below. You are now connected to the VPN.
    

Uninstalling the FortiClient VPN:

Windows 10/11

FortiClient is uninstalled like most software, through the Add or Remove Programs menu.

1. Right-click the Start Button and click Apps & Features
2. Scroll through the list of installed software and find FortiClient VPN
3. Click FortiClient VPN, Uninstall, and then the newer Uninstall button.
4. FortiClient will begin uninstalling. Once complete, it will prompt you to reboot. If you wish to reboot immediately, click OK. Otherwise, click Cancel and reboot later.

macOS

1. Within Finder, click Go in your top menu bar, and then Applications.
2. Find and then double-click FortiClientUninstaller.
3. Click Uninstall, and answer any Apple security-related prompts it asks you. 
4. It should guide you through the uninstallation process there, and remove the software from your computer. A reboot is required to fully uninstall the software.

Common Issues:

• Issue: The FortiClient SSLVPN disconnects after 40-60 seconds of use.
  • Fix: Verify that your wireless and ethernet adapters have up-to-date drivers from their vendor’s site. The ITS Helpdesk can assist with this process if necessary.
• Issue: After logging in to FortiClient, you see a “This site cannot be reached” page in your browser
  • Fix: Close out of that window, open the FortiClient, click Remote Access and then Login again. It should automatically sign you in since it remembers you from the first attempt, and then connect. This often happens if you are on a slow or unstable internet connection.
• Issue: The FortiClient SSLVPN appears connected, however you still cannot access certain UM-Flint resources.

Fix: If you just logged in, please wait 10-15 seconds before trying to access the resource again. If this does not work, contact the ITS Helpdesk (810-762-3123) for further assistance.
 

Troubleshooting

If you have any questions or experience any issues with this article, please visit or contact the ITS Helpdesk for assistance.

Location: 206 Murchie Science Building

Hours: go.umflint.edu/hours

Phone: (810) 762-3123

Email: flint.its.support@umich.edu