Configuring VPN Clients (2024)

Technote #569 v11

Title: Configuring VPN Clients for UofR Secure Connection
Applies to: VPN users
Section: Network
Owner: Network Analyst, Network & Communication Services
Last updated: December 22, 2022

Introduction
A virtual private network (VPN) creates an encrypted connection to the UofR network which allows your computer to appear as though it is "on campus" even though it is not. This allows services that are not available from off-campus due to firewall security rules, to be accessed from anywhere in the world.

Only traffic destined to the UofR will flow through the VPN connection - regular internet browsing will not. This note describes the configuration of VPN Clients so that you can securely tunnel to the University of Regina campus from off-campus.

Known Issues
Version 7.0+: Windows FortiClient may fail to auto-connect after system sleep/hibernation on Windows 10/11.

VPN Tunnel Mode
For support for all protocol/service types(for example web sites on non-standard ports) installation of a VPN client is required. Instructions are provided below for Windows, MacOS, IOS, and Android systems

Windows 10 Fortinet SSL VPN Client Installation/Configuration

Installation
Note: Please uninstall any previous version of Forticlient before installing Forticlient v7.0

  1. Log in to your Windows system as administrator - this is necessary for the initial installation of the Fortinet SSL Client.
  2. Openan internet browser and type inhttps://www.fortinet.com/support/product-downloads in the address bar.
  3. This will take you to the FortiClient Download webpage https://www.fortinet.com/support/product-downloads
  4. Click "FortiClient"tab as seen in the below screen grab.
  5. Click on FortiClient VPN only under ForClient 7.0 header.
  6. Click on "Download" under Windows link for FortiClient VPN.
  7. Save the FortiClientOnlineInstaller.exe
  8. Click the "Save File" button and then install the FortiClient by accepting the "License Agreement" and then clicking "Next".
  9. Click "Install" to install the FortiClient on your windows computer.

Configuration

  1. Open the FortiClient by clicking Start | FortiClient | FortiClient. If you use the VPN frequently you may want to create a shortcut on your Desktop (drag FortiClient and drop it on the Desktop to create a shortcut).
  2. This version of Forticlient is much simpler and easier to use and doesn't come cluttered with older add-ons.
  3. Click on the checkbox to acknowledge the terms and conditions of use of the software.

Click "Configure VPN"
At the top choose "SSL-VPN"
Connection Name: UofR SSL-VPN
Description: UofR SSL-VPN
Server Remote Gateway https://vpn.uregina.ca
Authentication: Prompt on the login
Client certificate: Set to 'None'
Do not Warn Invalid Server Certificate: <leave it unchecked>
Click "Save" to save changes

Enter your username and password then click "Connect"

Once configured a menu appears in the menu bar that allows you to easily connect/disconnect:

Now you are securely connected to the U of R network, and your computer will behave as though it is "on campus". This connection will allow you to securely access applications that are restricted to on-campus use like FAST and URDocs.
When you are done using the VPNto connect to the UofR, you can switch to the FortiClient program and click "Disconnect".

macOS VPN Configuration

Please note, if your macOS version is older than 10.8 (Mountain Lion), you will not be able to run the FortiClient installer. Please upgrade your macOS version to use FortiClient VPN.

Note: Please uninstall any previous version of Forticlient.
Installation
Log in to your macOS system - this is necessary for the initial installation of the Fortinet SSL Client.
Openan internet browser and type inhttps://www.fortinet.com/support/product-downloads in the address bar.
This will take you to the FortiClient Download webpage https://www.fortinet.com/support/product-downloads
Click "FortiClient"tab as seen in the below screen grab.

Click the box "Download for MacOS" under "FortiClient VPN".
In your Downloads folder, double-click FortiClientOnlineInstaller.dmg
In theopen window double-click, FortiClientUpdate.app and the download of the client will start. Click install once the download has completed.
Please enter administartor credentials as asked by the system.

In the Welcome window, clickcontinue.
In theLicense window, click Continue, then Agree
In the Installation Type window click theInstalland enter your Mac administrator password and click Install Software

In the summary, windows click Close.
Configuration
Startup the FortiClient.app found in yourApplications folder.

Click on "Configure VPN".

Enter the following in the FortiClient SSL VPN window:

Connection Name/Description/Remote Gateway: vpn.uregina.ca
User name: <your uregina.ca username>
Password: <leave blank to be prompted or enter thepassword to save it>

Click Save.
Enter your uregina.ca username/password and click Connect to start the VPN connection.

macOS 10.15 Catalina & macOS 11 Big Sur:Forticlient will not connect if the System Extension is blocked. To allow the System Extention:
Go to System Preferences > Security & Privacy > General tab and click the Allow button beside System software from developer "Fortinet, Inc" was blocked from loading. You must have administrator credentials for the macOS machine to configure this change.

On macOS Monterey (macOS 12): You will receive a pop-up that "FortiTray would like to add VPN Configurations, click Allow on this message.

Once successfully connected aDisconnectbutton will appear on the window. You can minimizethe window to the dock or close it.

Once configured a menu appears in the menu bar that allows you to easily connect/disconnect:

Now you are securely connected to the U of R network, and your computer will behave as though it is “on campus”. This connection will allow you to securely access applications that are restricted to on-campus use like FAST and URDocs.
To disconnect click the VPN applications icon in the dock and select disconnect

iOS (iPhone/iPad) VPN Configuration

  1. On your iOS device, open the App Store and search for 'FortiClient'. Download the App and tap Open.
    TapConnections.

    TapAdd Configuration.

    Enterthe following information:Name: vpn.uregina.ca
    Host: vpn.uregina.ca
    Port: 443
    User: (uregina.ca username)
    Password: (uregina.ca password)
    Tap Save in the upper right corner.

    Tap the just created VPN connection - a checkmark will appear beside it. Then tapDone.

    Turn on the VPN connection by the slider next to the VPN at the top. The statuswill display Connected if successful and the timer will begin to count the connection duration.

    Now you are securely connected to the U of R network, and your device will behave as though it is “on campus”. This connection will allow you to securely access applications that are restricted to on-campus use like FAST, DOME, and URDocs.
    When you are finished using VPN, simply slide the VPN slider at the top back to the left.

Android

  1. Download and install the FortiClient VPN from the Google Play Store
  2. Launch the app. It may warn that Android 4.4.3 is required and warn that an error will occur for earlier versions but the app will still install (worked on 4.4.2)
  3. You will be prompted to enter VPN configuration information:
    1. VPN Name: UofR SSL VPN
    2. VPN Type: SSL VPN
    3. tap Create and enter the following:Server: vpn.uregina.ca
      1. Port: 443
      2. Username: <your uregina.ca username>
      3. Password: <your uregina.ca password>
      4. Auto Connect: Enabled
      5. Certificate: leave unchanged
      6. Check server certificate: Enabled
      7. now tap the Back button
    4. Tap Connect.
  4. You will get a message "Fortinet VPN is attempting to create a VPN connection". Tap to check I trust this application and tapOK.
  5. A message will be displayed: "This site certificate is not trusted, proceed anyway?" tap Proceed.(NOTE: IS is investigating why Android is not trusting the purchased certificate for vpn.uregina.ca - it is normally a bad idea to trust untrusted certificates)
  6. To close the VPN, launch the FortiClient VPN app and click Disconnect.
  7. To start the VPN in the future, launch the FortiClient VPN app and select the UofR SSL VPN and tap Connect

Revision History
v0, 2013-02-25, Initial version
v1, 2014-05-12, Add MacOS instructions and link
v2, 2014-12-30, Switched Windows/Mac instructions to use FortiClient SSLVPN
v3, 2015-03-19, Enhanced/clarified wording/pictures based on IT Support feedback.
v3, 2015-03-20, Added Android instructions. Thanks go to the desktop support group.
v4, 2015-11-03, Changed Android instructions to indicate only vpn.uregina.ca should be entered (not https://vpn...)
v5, 2016-06-14, Added Windows 10 as working for VPN client
v6, 2017-12-02, Changed macOS instructions to Fortinet Client
v7, 2018-01-02, Changed iOS instruction to Fortinet Client
v8, 2019-07-16, updated Windows/macOS installation and user interface guide for Forticlient 6.2
v9, 2020-09-01,updated Windows/macOS installation and user interface guide for Forticlient 6.4
v10,2021-06-25,updated Windows/macOS installation and user interface guide for Forticlient 7.0
v11,2021-09-22, removed deprecated Web Proxy VPN mode
v12,2022-12-22, added clarity for System Extension and VPN Configuration messages on macOS 10.15/11/12

Configuring VPN Clients (2024)

FAQs

Configuring VPN Clients? ›

VPNs allow devices that aren't physically on a network to securely access the network. Android includes a built-in (PPTP, L2TP/IPSec, and IPSec) VPN client. Devices running Android 4.0 and later also support VPN apps.

What is VPN configuration? ›

VPNs allow devices that aren't physically on a network to securely access the network. Android includes a built-in (PPTP, L2TP/IPSec, and IPSec) VPN client. Devices running Android 4.0 and later also support VPN apps.

What is a VPN client? ›

A VPN client is a software based technology that establishes a secure connection between the user and a VPN server. Some VPN clients work in the background automatically, while others have front-end interfaces that allow users to interact with and configure them.

How do I create a VPN client account? ›

Steps
  1. Prerequisites.
  2. Step 1: Generate server and client certificates and keys.
  3. Step 2: Create a Client VPN endpoint.
  4. Step 3: Associate a target network.
  5. Step 4: Add an authorization rule for the VPC.
  6. Step 5: Provide access to the internet.
  7. Step 6: Verify security group requirements.

How do I connect multiple VPN clients? ›

We will explore four methods for connecting to multiple VPNs and private networks.
  1. Method 1: Using Virtual Machines. ...
  2. Method 2: Using a VPN Client with Multi-Hop Capability. ...
  3. Method 3: Using VPN Split Tunneling and an extra VPN client. ...
  4. Method 4: Use Remote.It to Connect to Many Private Networks. ...
  5. Conclusion.
Feb 3, 2024

How do I setup and configure a VPN? ›

Steps for setting up a VPN
  1. Step 1: Line up key VPN components. ...
  2. Step 2: Prep devices. ...
  3. Step 3: Download and install VPN clients. ...
  4. Step 4: Find a setup tutorial. ...
  5. Step 5: Log in to the VPN. ...
  6. Step 6: Choose VPN protocols. ...
  7. Step 7: Troubleshoot. ...
  8. Step 8: Fine-tune the connection.

Are VPNs easy to configure? ›

Learning how to use a VPN doesn't require extensive IT knowledge. In fact, it only takes a few simple steps from getting a VPN to unblocking geo-restricted content, improving online privacy, and staying safe while torrenting or gaming.

What is the difference between a VPN and a VPN client? ›

Remember that there is a difference between using a VPN client and a VPN service—a VPN client only offers you a UI with which to access a VPN that you or someone else is hosting, whereas a VPN service hosts and manages its own servers.

Do I need a VPN client? ›

A VPN is essential to protect private data from hackers, especially when connecting to public hotspots. In addition, it lets users access home content securely while traveling. Businesses and organizations. Companies use VPNs for remote access.

How do I know if my client is using VPN? ›

Cross-matching a user's IP address with these databases can determine whether the user is associated with a VPN or Proxy. Several widely used IP address databases have gained widespread use in VPN detection. Services such as MaxMind, Udger, and IPinfo are known for their accuracy and extensive databases.

Which authentication methods are commonly used for client VPNs? ›

Client VPN offers the following types of client authentication:
  • Active Directory authentication (user-based)
  • Mutual authentication (certificate-based)
  • Single sign-on (SAML-based federated authentication) (user-based)

How does VPN client to server work? ›

Client-to-Server VPN

This involves the user not being connected to the internet via his own ISP, but establishing a direct connection through his/her VPN provider. This essentially shortens the tunnel phase of the VPN journey.

Can I host my own VPN? ›

Yes, you can DIY your very own VPN – but it's not easy. You have to choose a suitable device, install VPN software, and configure it for secure access.

Can VPN clients talk to each other? ›

If you want these two clients to directly communicate with each other there could be some issues. The VPN clients are pingable via the LAN when they are connected but might still be not be able to reach each other.

Can two devices use the same VPN? ›

Most VPNs offer at least five simultaneous connections, but some offer up to an unlimited number. Before purchasing a subscription, check with the VPN provider to see if it offers enough simultaneous connections for all of the devices on which you want to use the VPN.

Can you have two VPN connections at the same time? ›

It is possible for a double VPN service provider, such as NordVPN, to support multiple VPNs from a single device, with appropriate configuring of the NordVPN Double VPN feature. A VPN chain uses more than one VPN server, providing greater security for the connection.

Should I turn on VPN configuration? ›

You should use a Virtual Private Network (VPN) whenever you're online. By doing so, you make sure that your data and privacy are protected. Without a VPN, your every action online may be monitored and taken advantage of. A VPN encrypts all of your data, effectively hiding any information about you from prying eyes.

Do I need a VPN configuration? ›

Without a virtual private network (VPN), your internet service provider (ISP) may record your online activity and sell it to the highest bidder. However, you can protect your internet traffic with a VPN while browsing at home, at work, or connected to a public network.

What happens when you add VPN configuration? ›

A VPN, or Virtual Private Network, routes all of your internet activity through a secure, encrypted connection, which prevents others from seeing what you're doing online and from where you're doing it. Basically, a VPN provides an extra layer of security and privacy for all of your online activities.

What is VPN and should it be on or off? ›

When you use a VPN, you connect to the internet through the VPN's private, encrypted servers rather than your ISP's unencrypted servers. This means that anything you do online is hidden from your ISP, snoopers, and other third parties. PRO TIP: Keep your VPN on at all times while traveling.

Top Articles
Latest Posts
Article information

Author: Fredrick Kertzmann

Last Updated:

Views: 6136

Rating: 4.6 / 5 (46 voted)

Reviews: 93% of readers found this page helpful

Author information

Name: Fredrick Kertzmann

Birthday: 2000-04-29

Address: Apt. 203 613 Huels Gateway, Ralphtown, LA 40204

Phone: +2135150832870

Job: Regional Design Producer

Hobby: Nordic skating, Lacemaking, Mountain biking, Rowing, Gardening, Water sports, role-playing games

Introduction: My name is Fredrick Kertzmann, I am a gleaming, encouraging, inexpensive, thankful, tender, quaint, precious person who loves writing and wants to share my knowledge and understanding with you.