Fortinet Document Library

Version:

Version:

Version:


Table of Contents

Download PDF
Copy Link

Using FortiClient Configurator Tool for macOS

To create a custom FortiClient installation file:
  1. Double-click the FortiClientConfigurator_6.0.x.xxxx.dmg application file, and double-click the FortiClientConfigurator icon to launch the tool.
  2. Configure the following settings, and click Next:

  3. Source

    Select the FortiClient Installer file on your management computer.

    You must use the full installer file, otherwise FortiClient Configurator Tool will fail to create a custom installation file.

    The FortiClient Installer version and FortiClient Configurator Tool version must match, otherwise the Configurator will fail to create a custom installation file.

    Destination

    Enter a name for the custom installation file and select a destination to save the file on your management computer.

  4. (Optional) Configure the following settings, and click Next:

  5. Select Config File (optional)

    Select a FortiClient configuration file (.conf, .sconf) to include in the installer file.

    Password

    If the FortiClient configuration file is encrypted (.sconf), enter the password used to encrypt the file.

    Select IP List File (optional

    Select a FortiClient Telemetry gateway IP list to include in the installer file.

  6. Configure the following settings, and click Start:

  7. Features to Install

     
     

    Security Fabric Agent

    Selected by default to support Fortinet Security Fabric. FortiClient Telemetry is always installed to support integration of FortiClient into the Security Fabric as follows:

    • Participate in compliance
    • Send user ID, avatar and email address to FortiGate
    • Be managed by EMS

    Along with the Vulnerability Scan component (also included in this agent), this provides the Security Fabric administrators an overview of the state of the endpoint.

    Clear the checkbox to exclude the Compliance tab and Vulnerability Scan tab from the FortiClient installation file.

     

    Secure Remote Access

    Select to include SSL and IPsec VPN modules in the FortiClient installation file.

     

    Additional Security Features

    Select to include one or more of the following modules in the FortiClient installation file:

    • AntiVirus
    • Web Filtering
    • Single Sign On
    • Application Firewall

    Options

     

    Enable Software Update

    Select to enable FortiClient software updates via FortiGuard Distribution Network on endpoints.

     

    Configure Single Sign-On mobility agent

    Select to configure Singe Sign-On mobility agent for use with FortiAuthenticator.

  8. If you selected the Configure Single Sign-On mobility agent checkbox, the Single Sign-On Mobility Agent Settings page displays. Configure the following settings:

    Server IP/FQDN

    Enter the FortiAuthenticator server's IP address or FQDN.

    Port number

    Enter the port number. The default port is 8001.

    Pre-Shared Key

    Enter the FortiAuthenticator pre-shared key.

    Confirm Pre-Shared Key

    Enter the FortiAuthenticator pre-shared key confirmation.

  9. Click Start.
  10. Click Done. You can now deploy the repackaged FortiClient .dmg file to your macOS systems.

Using FortiClient Configurator Tool for macOS

To create a custom FortiClient installation file:
  1. Double-click the FortiClientConfigurator_6.0.x.xxxx.dmg application file, and double-click the FortiClientConfigurator icon to launch the tool.
  2. Configure the following settings, and click Next:

  3. Source

    Select the FortiClient Installer file on your management computer.

    You must use the full installer file, otherwise FortiClient Configurator Tool will fail to create a custom installation file.

    The FortiClient Installer version and FortiClient Configurator Tool version must match, otherwise the Configurator will fail to create a custom installation file.

    Destination

    Enter a name for the custom installation file and select a destination to save the file on your management computer.

  4. (Optional) Configure the following settings, and click Next:

  5. Select Config File (optional)

    Select a FortiClient configuration file (.conf, .sconf) to include in the installer file.

    Password

    If the FortiClient configuration file is encrypted (.sconf), enter the password used to encrypt the file.

    Select IP List File (optional

    Select a FortiClient Telemetry gateway IP list to include in the installer file.

  6. Configure the following settings, and click Start:

  7. Features to Install

     
     

    Security Fabric Agent

    Selected by default to support Fortinet Security Fabric. FortiClient Telemetry is always installed to support integration of FortiClient into the Security Fabric as follows:

    • Participate in compliance
    • Send user ID, avatar and email address to FortiGate
    • Be managed by EMS

    Along with the Vulnerability Scan component (also included in this agent), this provides the Security Fabric administrators an overview of the state of the endpoint.

    Clear the checkbox to exclude the Compliance tab and Vulnerability Scan tab from the FortiClient installation file.

     

    Secure Remote Access

    Select to include SSL and IPsec VPN modules in the FortiClient installation file.

     

    Additional Security Features

    Select to include one or more of the following modules in the FortiClient installation file:

    • AntiVirus
    • Web Filtering
    • Single Sign On
    • Application Firewall

    Options

     

    Enable Software Update

    Select to enable FortiClient software updates via FortiGuard Distribution Network on endpoints.

     

    Configure Single Sign-On mobility agent

    Select to configure Singe Sign-On mobility agent for use with FortiAuthenticator.

  8. If you selected the Configure Single Sign-On mobility agent checkbox, the Single Sign-On Mobility Agent Settings page displays. Configure the following settings:

    Server IP/FQDN

    Enter the FortiAuthenticator server's IP address or FQDN.

    Port number

    Enter the port number. The default port is 8001.

    Pre-Shared Key

    Enter the FortiAuthenticator pre-shared key.

    Confirm Pre-Shared Key

    Enter the FortiAuthenticator pre-shared key confirmation.

  9. Click Start.
  10. Click Done. You can now deploy the repackaged FortiClient .dmg file to your macOS systems.