By Manny Fernandez

April 7, 2020

Running Post VPN Login Script

Running Post VPN Login Script

I have been getting asked this question since this coronavirus thing started.  I decided I would address it with an article.  So the use case is:  You want to run a script after the user logs in.  This could be like mapping / mounting a share, running an application, etc.

I wrote an article about packaging the FortiClient.  You can follow the same process however there is another section you need to modify.

On Connect

Windows

Option I

<on_connect> 
   <script>
     <os>windows</os> 
       <script>
         <script> 
             <![CDATA[
                net use x: \\10.1.1.43\home /user:mfernandez 
                md c:\inbox
                copy x:\outbox\*.* c:\inbox
               ]]> 
             </script>
           </script> 
      </script>
</on_connect>

Option II

I updated this to show how you can run a batch file or script file.

<on_connect>
   <script>
     <os>windows</os>
       <script>
         <script>
             <![CDATA[
                 Script "C:\ournetwork\NETLOGON\manny.bat"
              ]]>
         </script>
       </script>
      </script>
</on_connect>

macOS X

In a macOS X environment,

<on_connect> 
   <script>
      <os>mac</os> 
      <script>
         /bin/mkdir /Volumes/Share1
         mount -F smbfs -o user=root,domain=monkey //server.myinfosec/tmp /Volumes/Sahre1 
      </script> 
    </script>
</on_connect>

 

On Disconnect

Windows

Similar to the On Connect (as above), we can also run scripts when you disconnect.

<on_disconnect> 
   <script>
      <os>windows</os> 
      <script>
        <script> 
          <![CDATA[
            net use x: /DELETE 
           ]]>
         </script> 
       </script>
    </script> 
</on_disconnect>

macOS X

<on_disconnect> 
    <script>
       <os>mac</os> 
       <script>
          /sbin/umount /Volumes/Share1
       </script>
     </script> 
</on_disconnect>
Hope this helps.
Thanks to Omar Ortiz and Matt Sherif for their input.

 

Managing Windows Firewall from the Command Line: netsh, PowerShell and 7 Hidden Features

Managing Windows Firewall from the Command Line: netsh, PowerShell and 7 Hidden Features

Master the Windows firewall command line with netsh and PowerShell, plus 7 hidden features like FQDN rules, drop forensics and auto-revert.

Read More
Lua Primer for Security Engineers: The Language Behind Nmap, Wireshark and Snort 3

Lua Primer for Security Engineers: The Language Behind Nmap, Wireshark and Snort 3

Learn Lua for security engineers. Parse FortiGate logs and write Nmap NSE scripts. Master tables, patterns, and closures in this practical guide.

Read More
Txt2Task –  Import a ASCII list of tasks into Apple Reminders

Txt2Task – Import a ASCII list of tasks into Apple Reminders

Use Txt2Tasks to import tasks to Apple Reminders from plain text. Follow this guide to install the app, format your file, and handle permissions.

Read More