FortiClient for iOS v2.0.

1 GA
QuickStart Guide

FortiClient for iOS v2.0.1 GA QuickStart Guide June 31, 2012 04-201-176581-20120731 Copyright 2012 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, and FortiGuard, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions, and performance may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinets General Counsel, with a purchaser that expressly warrants that the identified product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinets internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

Technical Documentation Knowledge Base Customer Service & Support Training Services FortiGuard Document Feedback

docs.fortinet.com kb.fortinet.com support.fortinet.com training.fortinet.com fortiguard.com techdocs@fortinet.com

Table of Contents
Change Log....................................................................................................... 4 Introduction....................................................................................................... 5 Initial Configuration.......................................................................................... 6
Creating an account without a client certificate ...................................................... 6 Configure client certificates ..................................................................................... 7 Configure certificates imported to iTunes.......................................................... 8 Creating an account with a client certificate ........................................................... 9 Edit or delete an account....................................................................................... 10

SSL-VPN Connections ................................................................................... 11

Starting an SSL-VPN connection .......................................................................... 11 Start an SSL-VPN connection using FortiToken ................................................... 12 User Bookmarks .................................................................................................... 14

Appendix A: Troubleshooting........................................................................ 16
Invalid Server Certificate........................................................................................ 16

Appendix B: Additional Information.............................................................. 17

Information Page ................................................................................................... Forums ............................................................................................................. Help.................................................................................................................. Provide Feedback ............................................................................................ Terms and Conditions...................................................................................... 17 17 18 19 19

Page 3

Change Log
Date 2012-07-27 Change Description Initial release.

Page 4

Introduction
Thank you for choosing FortiClient for iOS. FortiClient for iOS is an SSL-VPN web-mode client that provides secure communications across the Internet to your network through secure socket layer (SSL) to ensure data privacy and security.

Fortinet Technologies Inc.

Page 5

FortiClient for iOS v2.0.1 GA QuickStart Guide

Initial Configuration
Creating an account without a client certificate
To create an SSL-VPN connection account, without a client certificate, follow the steps below. 1. Tap the + symbol on the top navigation pane of the FortiClient for iOS home page. 2. Enter an account name and select OK. Each account created must have an unique name When running the application for the first time, Add Account is the default page. Figure 1: FortiClient for iOS home, and Add Account pages

3. Select Host Name and enter the server host name or IP address, and then select OK. 4. Select Host Port to enter server TCP port, and then select Done on the keyboard menu. The default port is 10443. 5. Optionally, select User Name to enter user name, and then select Done on the keyboard menu. Toggle the Check Certificate value on Server Certificate section to OFF if you do not want to verify the server certificate. The default value is ON.

Fortinet Technologies Inc.

Page 6

FortiClient for iOS v2.0.1 GA QuickStart Guide

Figure 2: Account details page

6. Select Save from the top menu pane to create the account.

Configure client certificates

For more information, see the Provision Certificates to iOS Devices Technical Note at http://docs.fortinet.com/fclnt.html.

To import certificates to the FortiClient application using iTunes, follow the steps listed below. 1. Open the iTunes program, and connect your iOS device. 2. Browse to the iOS device home screen page, and select Apps. Scroll down on the page to File Sharing, and select the FortiClient icon in the Apps column. Figure 3: iOS device home screen

3. Select the Add button under FortiClient Documents and browse to you computers hard drive and locate the certificate file.

Fortinet Technologies Inc.

Page 7

FortiClient for iOS v2.0.1 GA QuickStart Guide

Figure 4: Browse to locate the certificate file

4. Select the certificate file and select Open to save it to the iTunes FortiClient document File Sharing directory. 5. Save to File Sharing directory, and sync the iOS device with iTunes. Figure 5: FortiClient documents

Configure certificates imported to iTunes

To configure certificates on the FortiClient application that have been imported using iTunes, follow the steps listed below. 1. Open the FortiClient application, select the account, under Client Certificate > File Name, browse for the certificate you added in iTunes. Select the certificate and then select Done to save the certificate to the FortiClient account.

You can associate a certificate to each FortiClient account.

Fortinet Technologies Inc.

Page 8

FortiClient for iOS v2.0.1 GA QuickStart Guide

Figure 6: Select the certificate.

Creating an account with a client certificate

To create an SSL-VPN connection account, with a client certificate, follow the steps below. 1. Tap the + symbol on the top navigation pane of the FortiClient for iOS home page. 2. Enter an account name and select OK. Each account created must have an unique name When running the application for the first time, Add Account is the default window. Figure 7: FortiClient for iOS home, and Add Account pages

3. Select Host Name and enter the server host name or IP address, and then select OK. 4. Select Host Port to enter server TCP port, and then select Done on the keyboard menu. The default port is 10443. 5. Optionally select User Name to enter user name, and then select Done on the keyboard menu. 6. Select File Name under Client Certificate, and scroll to find the certificate you imported using iTunes, select the Select button.

Fortinet Technologies Inc.

Page 9

FortiClient for iOS v2.0.1 GA QuickStart Guide

7. Select Pass Phrase and enter a value for the certificate, select Done on the keyboard menu. If the Pass Phrase and the certificate are correct, the Summary field will show the certificate information. Toggle the Check Certificate value on Server Certificate section to OFF if you do not want to verify the server certificate. The default value is ON Figure 8: Certificate selection pages

8. Select Save from the top menu pane to create the account.

Edit or delete an account

To edit or delete an account, follow the steps below. 1. Select the Edit button on the top menu pane of the FortiClient for iOS home page. 2. To delete an account, select the red icon to the left of the account and select delete. Figure 9: FortiClient for iOS home page.

3. To edit an account, select the account from the list. Edit the fields as required, and select Done on the top menu pane to save the settings.

Fortinet Technologies Inc.

Page 10

FortiClient for iOS v2.0.1 GA QuickStart Guide

SSL-VPN Connections
Starting an SSL-VPN connection
To start an SSL-VPN connection, follow the steps below. 1. On the FortiClient for iOS home page, select the account that you created for the VPN connection. Figure 10:FortiClient for iOS home page.

2. Select Password, enter your password, and select Done on the keyboard menu. Figure 11:Select the account and enter your password

3. Select Login on the top menu pane. A connection window will display the connection status. Once the connection is established, you will be forwarded to the Bookmarks page.

Fortinet Technologies Inc.

Page 11

FortiClient for iOS v2.0.1 GA QuickStart Guide

Figure 12:Connection, and SSL-VPN web portal pages

4. Select the Bookmark from the list. To return to the Bookmarks screen, select the home icon on the top menu pane. 5. Select Logout to end the SSL-VPN connection.

Start an SSL-VPN connection using FortiToken

To start an SSL-VPN connection using FortiToken, follow the steps below. 1. On the FortiClient for iOS home page, select the account that you created for the VPN connection. Figure 13:FortiClient for iOS home page

2. Select Password, and enter your password, select Done on the keyboard menu.

Fortinet Technologies Inc.

Page 12

FortiClient for iOS v2.0.1 GA QuickStart Guide

Figure 14:Select the account and enter your password

3. Select Login on the top menu pane. 4. An Input Token window will prompt you to input the token value. Enter the 6-digit token displayed on your FortiToken, and select OK. 5. A connection window will display the connection status. Figure 15:Token and connection status pagel

6. Once the connection is established, you will be forwarded to the SSL-VPN web portal page where you can access pre-defined Bookmarks.

Fortinet Technologies Inc.

Page 13

FortiClient for iOS v2.0.1 GA QuickStart Guide

Figure 16:SSL-VPN web portal page

7. Select the Bookmark from the list. To return to the Bookmarks screen, select the home icon on the top menu pane. 8. Select Logout to end the SSL-VPN connection.

User Bookmarks
To add user bookmarks, follow the steps below. 1. Login to the SSL-VPN web portal. Figure 17:SSL-VPN web portal page

2. Select the "+" button from the top menu pane. If user bookmarks are not allowed, the button will not be available.

Fortinet Technologies Inc.

Page 14

FortiClient for iOS v2.0.1 GA QuickStart Guide

Figure 18:+ button to add a bookmark]

3. Select Name to enter bookmark name, and then select Done on the keyboard menu. 4. Select Type to select bookmark type, and then select Done on the keyboard menu. 5. Select Location to enter bookmark URL, and then select Done on the keyboard menu. You can select Description to enter bookmark description (optional), and then select Save. Figure 19:Add Bookmark pages

6. Select Save on the top menu pane to save the setting. Figure 20:User Bookmark added successfully

Fortinet Technologies Inc.

Page 15

FortiClient for iOS v2.0.1 GA QuickStart Guide

Appendix A: Troubleshooting
Invalid Server Certificate
If the server certificate is untrusted, the user will receive the following error message: Login Error: Connection failed: SSL Problem: possibly a bad/expired/self-signed server certificate. Figure 21:Login Error window

To resolve this issue, follow the steps below. 1. Go to Accounts page of the FortiClient application. 2. Select the Edit button on the top menu pane. 3. Select the account name that you are using for the connection. 4. Toggle the Check Certificate value on Server Certificate section to OFF to not verify the server certificate. 5. Select Done on the top menu pane. 6. Start a new connection.

Page 16

Appendix B: Additional Information

Information Page
The information icon allows you to access additional information including Forums, Help, Terms and Conditions, and the option to provide feedback to the iOS development team. Figure 22:Information page

Forums
Fortinet Technical Discussion Forums allows you to communicate with other customers and Fortinet partners about FortiClient, and other Fortinet products in a forum environment.

Page 17

Figure 23:Fortinet Technical Discussion Forum page

Help
The Help menu allows you to access FortiClient for iOS documentation, how to videos, and the SSL-VPN demo. Figure 24:Help page

Documentation
Documentation includes the FortiClient for iOS QuickStart Guide, and the Provision Certificates to iOS Devices Technical Note.

How To Videos
A video has been provided to walk you through the FortiClient for iOS SSL-VPN client.

Page 18

SSL-VPN Demo
To connect to the SSL-VPN demonstration, select Help on the information page, and then select Demo on the Help page. Select Add Demo Account, to add the account. The demo allows you to test the SSL-VPN features. Figure 25:SSL-VPN demonstration

Provide Feedback
Please send comments, suggestions, or information about any errors with the FortiClient for iOS SSL-VPN client to the iOS development team. Figure 26:Provide feedback message page

Terms and Conditions

Terms and Conditions includes the Trademarks and Copyright Statement, and the Product License Agreement.

Page 19