FMRIB VPN Service setup and configuration
Note
Only traffic destined for the FMRIB or University networks will route from your computer through the FMRIB VPN (you may hear this referred to as 'split-tunnelling'). Other University traffic (e.g., YouTube, Microsoft Teams) will travel out via your internet service provider (ISP). If you need access to a service that requires you to appear to come from a University address then please contact us for advice.
Installation
The FortiClient software can be installed from the Self Service application (green/blue/red/orange rotated square icon). You will find it in the 'All' section, click the 'Install' button to begin installation.
Orchard Self-Service application window
Once installed you will be asked to approve the addition of a VPN configuration - click Allow.
Screenshot 2023-02-16 at 09.28.44.png
FortiClient is now installed and can be configured.
Configuration
Launch the FortiClient application, tick the box to agree to the terms of use and click 'I accept'.
Screenshot 2023-02-16 at 09.28.59.png
At this point you should find a pre-configured connection called FMRIBUsers for connecting to the FMRIB VPN service. This will authenticate with your University SSO.
Initial installation
To get started, download 'FortiClient 7.4 VPN-Only' from FortiClient.com - this should download the latest version - you need 7.4.3 as a minimum.
Once downloaded, double click on FortiClientVPN_OnlineInstaller.dmg to open the installer container and run the ForticlientUpdate.app within. This will download the required components and when finished, click the Launch button to begin the next phase of the installation. This download step can take some time and even fails from time to time.
When/if prompted Allow the FortiTray VPN Configuration addition.
Screenshot 2023-02-16 at 09.28.44.png
Configuration
The configuration of the VPN service is provided by a configuration file on our registration server. named 'FMRIB User VPN (macOS)':
https://register.fmrib.ox.ac.uk/registration/help#vpn-config
Once downloaded, open FortiClient VPN and then click on Configure VPN (or open the burger menu to the side of an existing configuration and choose Add a new connection).
In the next page click on the tab XML then click Import XML Configuration - browse to the file you have downloaded, select it and click Open - ignore the option to enter a password and click Import.
If at this point you receive an 'Error' box then please move the fcconf-user.conf file to your /tmp folder - to do this, open a new Finder window and use SHIFT-command-G to open a file path window and enter /tmp into the box and hit return. Now drag the file fcconf-user.conf from your Downloads folder into the /tmp window. Now repeat the XML import above, but in the file browser that pops up again use SHIFT-command-G, entering /tmp to navigate to the folder. Now select the fcconf-user.conf file.
At this point quit and reload FortiClient VPN and you should now find a FMRIBUser VPN without a username/password field. Use this to connect, using your University SSO account when prompted in a web browser window.
From the Fortinet downloads page, https://links.fortinet.com/forticlient/win/vpnagent , download the installer ‘FortiClientVPNOnlineInstaller.exe’. Right-click and choose ‘Run-as Administrator’ from the menu. Follow the prompts to complete the installation.
Once installed start FortiClient, if prompted, agree to the terms of use and then proceed to setup a VPN configuration.
CONFIGURATION Download the configuration for the FMRIB VPN from our registration site named 'FMRIB User VPN (Windows)':
https://register.fmrib.ox.ac.uk/registration/help#vpn-config
Assuming it has been downloaded to your Downloads folder, open FortiClient VPN and from the start screen click on 'Configure VPN' (or select 'Add a new connection' from the burger menu if you already have configurations).
Click Configure VPN to get started
Now click on the 'XML' tab and then 'Import XML Configuration'. Import XML
Choose the file you downloaded. You will be returned to the previous window with a prompt for a password. Enter the password given on the registration site you downloaded the file from and click 'Import'.
Enter Password
You can now use the FMRIBUser VPN configuration to log in with your University Single Sign-On.
Installation
Download the Ubuntu FortiClient .deb file from https://links.fortinet.com/forticlient/deb/vpnagent, right-click on the downloaded file and choose Open with... and select App Centre. to open the software installer. Click the Install button to install the software.
Configuration
Download the Linux configuration for the FMRIB VPN from our registration site:
https://register.fmrib.ox.ac.uk/registration/help#vpn-config
Now open FortiClient, agree to the terms and then click on 'Configure VPN' (or use the burger menu to 'Add a new configuration'. In the next window, click the 'XML' tab then 'Import XML Configuration' and choose the file you downloaded, finally click 'Import' to load the configuration.
You can now use the 'SAML Login' button with the FMRIBUser VPN configuration to log in with your University Single Sign-On. You may be asked to choose a password for a new keyring - if you aren't already using the desktop password manager set a password - please ensure this matches the password policy when choosing one.
Installation
Download the FortiClient VPN RPM package from https://links.fortinet.com/forticlient/rhel/vpnagent - this will normally be downloaded to the Downloads folder in your user's home folder. In the file browser navigate to this folder and double click on the forticlient_vpn_X.XX.XXXX_x86_64.rpm file and click Install in the software install window.
Package manager screen for installation of FortiClient on Rocky Linux 9
Configuration
Download the Linux configuration for the FMRIB VPN from our registration site:
https://register.fmrib.ox.ac.uk/registration/help#vpn-config
Run FortiClient, agree to the terms of use then click 'Configure VPN' (or click the burger menu and 'Add a new connection'. Click the XML tab, then click on the Import button and locate the file you downloaded earlier. Once selected you should be returned to the import XML page with the path to the file filled in. Ignore the 'Password' box and click 'Import'.
Import configuration window
This should return you to the first window but with a FMRIBUser VPN configuration option. You can now use the 'SAML Login' button with the FMRIBUser VPN configuration to log in with your University Single Sign-On. You may be asked to choose a password for a new keyring - if you aren't already using the desktop password manager set a password - please ensure this matches the password policy when choosing one.
Click SAML Login to open the SSO login window in a web browser.