Part of my daily gig is creating BoMs (Bill-of-Materials)... Full Story
By Manny Fernandez
October 4, 2021
Removing “Launch FortiClient” from FortiGate Web Portal VPN
I had a customer that had configured a Web Portal VPN and he did not want anyone using FortiClient since it would be a client-less VPN. We disabled the usual setting but when the user would connect, they would still see the initial Launch FortiClient at the login.

The customer wanted this to be removed since he did not want the user confused and hitting the Launch FortiClient button when they entered their credentials.

So the first thing to note is you must use Realms since the the standard SSL VPN Login Page (located under System then Replacement Messages) is a global configuration and will affect all SSL Portal VPN login pages (Assuming you do not want it disabled on ALL the Web Portal VPNs). Under the realm you need to enable the Customize Login Page and then click the Edit button. Once you go into the edit mode, you will need to remove some lines of code.

Below is the actual code that needs to be removed
<button id="launch-forticlient-button" type="button" onClick="launchFortiClient()">
<f-icon class="ftnt-forticlient">
</f-icon>
<span>
Launch FortiClient
</span>
</button>
<iframe id="launch-forticlient-iframe" style="display:none">
Once this is complete, save it and then OK.

You should now NOT see the Launch FortiClient button on the initial login page.
Hope this helps
Recent posts
-
-
ICMP introduces several security risks, but careful filtering, rate... Full Story
-
The command diag debug application dhcps -1 enables full... Full Story
-
In the world of FortiOS, execute tac report is... Full Story
-
LLDP; What is it The Link Layer Discovery Protocol... Full Story
-
What it actually does When you run diagnose fdsm... Full Story
-
Monkey Bites are bite-sized, high-impact security insights designed for... Full Story
-
I have run macOS in macOS with Parallels but... Full Story
-
Don't be confused with my other FortiNAC posts where... Full Story
-
This is the third session in a multi-part article... Full Story
-
Today I was configuring key-based authentication on a FortiGate... Full Story
-
Netcat, often called the "Swiss Army knife" of networking,... Full Story
-
At its core, IEEE 802.1X is a network layer... Full Story
-
In case you did not see the previous FortiNAC... Full Story
-
This is our 5th session where we are going... Full Story
-
Now that we have Wireshark installed and somewhat configured,... Full Story
-
The Philosophy of Packet Analysis Troubleshooting isn't about looking... Full Story