Installing the FortiNBI application

When a FortiProxy user with a matching policy that has the isolator profile attempts to access a website on a machine without the FortiNBI service running, the user will see the following prompt page with a download link to the FortiNBI installer.

To install the FortiNBI application:

1. Click the FortiNBI installer link on the browser isolation replacement page to download the installer.

2. Run the installer with an administrator account:

   1. .NET Runtime 7.0 and Windows App SDK 1.4 are automatically installed. If the automatic installation fails, you must manually download and install these components from the Microsoft website:

      • .NET Runtime 7.0

      • Windows App SDK 1.4

   2. Files are unpacked to the installation folder, by default C:\Program Files (x86)\Fortinet\FortiNBI.

   3. The FortiNBI GUI is registered as a task that runs automatically every time that a user logs on.

3. FortiNBI starts automatically, followed by isolator and extension installations:

   1. FortiNBI checks if the system has Windows Subsystem for Linux (WSL) and Virtual Machine Platform enabled. If not, the installer will automatically enable and configure it.

   2. The isolator image is downloaded from the FortiProxy's portal through HTTPS, extracted to a temporary folder, imported to the system, and then the temporary files are removed.

   3. After the installation procedure finishes, restart the browser (if the browser is already open) for the FNBI extension to be installed. Reboot Windows when requested.

   4. If using Firefox, the first time that you use FortiNBI you will see a prompt page with instructions to enable browser permissions to access site data. Follow the instructions to enable the browser permissions.

      

4. When required, the client will receive an RDP pop-up window for isolation.

To upgrade your FortiNBI version independently without upgrading your FortiProxy version:

Upload a FortiNBI installer to FortiProxy using the following command:

execute upload fortinbi-installer tftp <filename><tftp-ip>.

Example output:

FPXVULTM23000034 # exe upload fortinbi-installer tftp fortinbi-installer.exe.21.tar.gz 10.100.1.205
Preparing file import 'fortinbi-installer.exe.21.tar.gz' from tftp server '10.100.1.205'
Importing file 'fortinbi-installer.exe.21.tar.gz' from tftp server '10.100.1.205'
#############################
FortiNBI installer (version: 1.0.6.21) upload and verification succeeds.
A restart of WAD is required for the installer to be ready.
Do you want to continue? (y/n)y
Restart WAD... done

A restart of WAD daemon is required for the new FortiNBI installer to take effect. You can check the current FortiNBI version in the About tab of the FortiNBI application.