Forticlient and Ubuntu

elrasho · 21 Jun 2020 at 21:27

So my Windows 10 laptop kept bluescreening and I installed Ubuntu as a fresh install.

Everything works perfectly apart from my Forticleint VPN to work... it connects much faster than Windows 10 did but when it does no data is being sent/received

The data count is 0.0Kbps for the downstream adn 0.05Kbps for the upstream, yet it stays like that :/

I can't RDP or Ping any work servers. Could it be their blocking Linux computers from using VPN? The thing is I do get a valid IP address on the VPN connection.

HoneyBadger · 21 Jun 2020 at 23:44

I use FortiClient ok with windows for work and on my Mac and Ubuntu VM. I’m using the client to connect to an SSL VPN though and not IPSEC.

Are you operating split tunnelling? (I am)

Sounds like a binding/routing issue.

Vince · 22 Jun 2020 at 03:02

elrasho said:
So my Windows 10 laptop kept bluescreening and I installed Ubuntu as a fresh install.

Everything works perfectly apart from my Forticleint VPN to work... it connects much faster than Windows 10 did but when it does no data is being sent/received

The data count is 0.0Kbps for the downstream adn 0.05Kbps for the upstream, yet it stays like that :/

I can't RDP or Ping any work servers. Could it be their blocking Linux computers from using VPN? The thing is I do get a valid IP address on the VPN connection.

The firewall might not be pushing out all the settings correctly under linux, I noticed that my home fortigate isnt set up properly and won't push settings out but the london and midlands firewalls will. Might be worth just checking dns in the forinet adapter and also turning on or off split tunneling as suggested above.

I doubt they are blocking linux, im not even sure if they can. Ive just had a look through all the settings on my 30e and cant see anything.

HoneyBadger · 22 Jun 2020 at 09:47

I've just checked on our Fortigate 1500D and can't see any obvious regarding OS restrictions so I'd conclude it's not that.

SupraWez · 22 Jun 2020 at 09:59

Have you tried adding a static route on your ubuntu machine to force the required traffic down the tunnel?

elrasho · 22 Jun 2020 at 13:02

HoneyBadger said:
I use FortiClient ok with windows for work and on my Mac and Ubuntu VM. I’m using the client to connect to an SSL VPN though and not IPSEC.

Are you operating split tunnelling? (I am)

Sounds like a binding/routing issue.

I don't know how to check I'm using split tunneling I'm afriad

I tried this but it wouldnt connect: https://www.howtogeek.com/51340/setting-up-a-split-tunnel-vpn-pptp-client-on-ubuntu-10-04/

HoneyBadger · 22 Jun 2020 at 13:54

A tracert would detmine where your data is attempting to go, i.e. down the tunnel or directly.

elrasho · 23 Jun 2020 at 09:24

What am I tracerouting to though?

SupraWez · 23 Jun 2020 at 09:40

elrasho said:
What am I tracerouting to though?

The destination you are trying to reach over the VPN.

elrasho · 23 Jun 2020 at 09:59

OK I tried pinging a fileserver and it said it can't find the DNS entry for it. So I tried the IP address and it works!!

The thing is my PC at work is on DHCP so I need to figure out how to get the VPN connection to use my works DNS servers right?

Vince · 23 Jun 2020 at 10:17

elrasho said:
OK I tried pinging a fileserver and it said it can't find the DNS entry for it. So I tried the IP address and it works!!

The thing is my PC at work is on DHCP so I need to figure out how to get the VPN connection to use my works DNS servers right?

Modify the dns in the fortigate adapter. Set those to your work dns servers and you should be away.

SupraWez · 23 Jun 2020 at 10:19

As above, update your DNS servers entry or if only using a couple services you can just chuck em in your local hosts file

elrasho · 23 Jun 2020 at 10:33

Vince said:
Modify the dns in the fortigate adapter. Set those to your work dns servers and you should be away.

Thanks, where do I find the Fortigate Adapter?

Vince · 23 Jun 2020 at 14:37

elrasho said:
Thanks, where do I find the Fortigate Adapter?

In windows there is a virtual adapter created as shown below:

You will need to update dns in one or both of these adapters.

elrasho · 23 Jun 2020 at 16:03

I'm using Ubuntu, there is no setting like this in the GUI

I fear it's all going to be command line

Any advice?

Vince · 23 Jun 2020 at 16:13

elrasho said:
I'm using Ubuntu, there is no setting like this in the GUI

I fear it's all going to be command line Any advice?

Follow this?

https://support.rackspace.com/how-to/changing-dns-settings-on-linux/

Doesn't seem too crazy. Looks like the best bet is just adding the works DNS servers to your current servers. Should be simple

elrasho · 23 Jun 2020 at 20:48

Got network guys making my works PC have a static IP

Thanks for the help all

HoneyBadger · 24 Jun 2020 at 20:21

Our PC clients at work Use DHCP but we use reservations. We also add DNS aliases , so if Bob Smith wants to RDP into his PC for whatever reason, he uses a CNAME alias xxbsmith.domain.com.

elrasho · 24 Jun 2020 at 21:07

HoneyBadger said:
Our PC clients at work Use DHCP but we use reservations. We also add DNS aliases , so if Bob Smith wants to RDP into his PC for whatever reason, he uses a CNAME alias xxbsmith.domain.com.

Thats a great idea