I've had a number of customers ask me if there's any way to use CLI commands to export the free FortiClient VPN configs. In my digging I found this article; but try as I may, it didn't quite work right. After playing around with this for a bit I found a way to export the free FortiClient VPN configuration, and re-import on other clients. This opens up the possibility of automating the process of importing VPN tunnel (SSL or IPSEC) configurations. This process uses the FCConfig.exe tool for windows which is located in C:\Program Files\Fortinet\FortiClient\ on Windows, and /Library/Application Support/Fortinet/FortiClient/bin on macOS.
You will need to configure your VPN tunnels on at least one computer with FortiClient VPN installed. Then you can export it using the following command:
C:\Program Files\Fortinet\FortiClient\FCConfig -m vpn -f path/to/file.xml -o export -p <password>on macOS use:
cd Application\ Support/Fortinet/FortiClient/bin/
(You don't have to change directories if you want, you can just append the path to fcconfig in the next step)
sudo ./fcconfig -m vpn -f ~/vpn.settings.xml -o export -p <password>
and this should export the file where ever you specify.
To import the settings file execute the following:
C:\Program Files\Fortinet\FortiClient\FCConfig -m vpn -f path/to/file.xml -o import -p <password>on macOS use:
cd Application\ Support/Fortinet/FortiClient/bin/
(You don't have to change directories if you want, you can just append the path to fcconfig in the next step)
sudo ./fcconfig -m vpn -f ~/vpn.settings.xml -o import -p <password>
Using this information you should be able to automate the import of tunnel settings on FortiClient VPN installs en masse using PowerShell/GPO/SCCM/LogonScript/etc..
Thanks for reading, I hope this was helpful.