OpenVPN Support Forum

Hi guys,

I'm new to OpenVPN and even though I have read the howtos on the web site I have to admit that I'm quite confused. Additionaly I didn't really knew where to post this on the forum so forgive me if this isn't the right subsection ...

by the way this is my question. I have windows8 and use forticlient lite client to connect to my company SSL-VPN when i need to work from home. Forticlient doen't ask me for anything except for server address, username, password and VPN type (i select ssl-vpn). I would like to replicate this with a openvpn client but i don't know how. I tried with the sample config changing server address and putting a server certificates that i was able to save when forticlient connects to the server but of course it doesn't work. any idea ? any suggestion ? the problem here is that forticlient doesn't ask for anithing so i don't know which parameters i have to put in the client config file ...

here is my tentative client config
thanks for any help
PS: sorry for my english
Paolo
Italy

Hi,
I have the exact same question.
My VPN connection works using FortiClient VPN, but I couldn't find a working setup for openVPN (Securepoint SSL VPN).
With openVPN/Securepoint SSL VPN I always get instant TCP connection resets, while FortiClient VPN is running TCP with no problems.

FortiClient VPN destroys my routing table, I want to configure routing by myself instead. Also FortiClient is requiring to much system ressources compared to openVPN.

Thanks/regards,
rund

Hi rund,

I am not familiar with these products. Contact their vendors for support. I bet they don't want you switching to a generic openvpn client, and they may have done something deliberate to prevent that. Perhaps something at the firewall level is detecting that you're not using their designated client, then sending a TCP reset to your client.

Seems strange (perhaps clueless) that they would be using TCP for openvpn. You can find plenty of documentation all over openvpn.net and the community wiki about why that is not recommended.

You might also want to ask your VPN administrator for help. If you can't get help from the vendor and your admin, try comparing some tcpdump(8) packet captures of both successful and broken client connections. But that will not work, if, as I suspect, something is being done inside the encrypted tunnel to trigger the firewall.

If they have patched the openvpn source code to do this, ask for the source code. If they refuse, that would be a GPL violation, and we might be interested in initiating enforcement action.

regards, rob0

kayard wrote: ↑

Sun Jan 27, 2013 1:09 pm

by the way this is my question. I have windows8 and use forticlient lite client to connect to my company SSL-VPN when i need to work from home. Forticlient doen't ask me for anything except for server address, username, password and VPN type (i select ssl-vpn). I would like to replicate this with a openvpn client but i don't know how. I tried with the sample config changing server address and putting a server certificates that i was able to save when forticlient connects to the server but of course it doesn't work. any idea ? any suggestion ? the problem here is that forticlient doesn't ask for anithing so i don't know which parameters i have to put in the client config file ...

I have the same question...

Any luck with this?

I refuse to use the Forticlient VPN... seems very clumsly and i had problems installing it (doesen't even download from the servers)

I was looking for a way to use OpenVPN instead!

I am posting here since this seems to be one the top google results when searching for this.

It seems that SSL-VPN is a completely proprietary protocol that cannot be used with an openvpn client.
I have however found an OSS implementation of this protocol which worked for me:
https://github.com/adrienverge/openfortivpn