This profile will automatically grant Privacy settings for Accessibility and Full Disk and enable NotificationsĬreate a new Custom App in Kandji by Selecting Library > Add New > Custom App > Add & ConfigureĪssign your custom app to a test Blueprint NOTE: It's generally good practice to assign new library items to a testing Blueprint to ensure that everything works as expectedĬhange the installation type to Audit and Enforce Upload the forticlient_settings.mobileconfig file to Kandji as a custom configuration profile. Give the custom profile the following name: FortiClient SettingsĪssign the library item to a Blueprint NOTE: It's generally good practice to assign new library items to a testing Blueprint to ensure that everything works as expected This configuration profile enables Notifications, System Extensions, Privacy Preferences ( PPPC) to allow Full Disk Access, and a Web Content filter for FortiClient.Ĭopy the forticlient_ae_script.zsh script from the Kandji support GitHub repository ( GitHub Link)ĭownload the FortiClient installer from your FortiClient portalĬreate a Custom Configuration Profile in Kandji by selecting Library > Add New > Custom Profile > Add & Configure to download the mobileconfig file directly. You can right-clink the link and select Save link as. Prerequisitesĭownload the forticlient_settings.mobileconfig file from the Kandji support GitHub repository ( GitHub Link). Note: If the connection progress stops at 45% You will need to check your phone for an additional Duo push notification.Use this guide to deploy FortiClient VPN as a custom app from your Kandji instance.

Once FortiClient has been installed, launch the application from Finder > Applications.Click the macOS 11 and above button to download the installer.If FortiClient is currently installed, open Finder > Applications and launch the FortiClientUninstaller to remove it.Contact the ITS HelpDesk 90 for assistance.)įortiClient VPN on macOS 12 (Monterey) Devices (Note: Admin rights are required to install FortiClient on a UNF owned device. You will receive a notification through Duo 2FA to confirm your identity.

Go to and login to the SSL VPN using your UNF credentials and Duo 2FA.

Forti client mac os