FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
Not applicable
Article Id 190369
Article

Description

You can create a custom installation of FortiClient on a user's computer by changing the MSI file. Using an MSI editor program, such as MaSaI Editor. The custom installation enables you to specify settings, such as whether the user will have the Antivirus scanning active or not. This particular installation procedure describes how to remove the Antivirus and Firewall components of the FortiClient installation. 

A silent install is possible without performing any customization (as described in this article).  See the link at the end of this article for examples.

Note: When you perform a silent or reduced UI installation, the MSI automatically disables the FortiClient Wizard after rebooting the PC. You do not need to edit the MSI to disable the wizard.

Components

The information on this article is applicable *Only* for FortiClient 1.2 MR2 or higher

The FortiClient zip file includes the MSI file required for this procedure. You will also need an MSI editor that can perform the transforms. This procedure uses the MaSaI Editor.
You can download the FortiClient zip file from http://support.fortinet.com and Masal Editor from www.masaieditor.com.

Note: FortiClient's sub-features do not yet support an "Advertised" installation.

Steps or Commands

To download and copy the MSI file:

  1. Download the FortiClient zip file at http://support.fortinet.com .
  2. Unzip and copy the MSI file to another location on your hard drive.
  3. Rename the MSI file to target.msi.

Before proceeding consider the following guidelines:

  • Never delete features you do not need; Disabling a feature is achieved by setting its install level to zero.
  • Never delete components you do not need.
  • Never move components from one feature to another.
  • Never modify the installation UI or installation execute sequences.
  • Never rename ANY existing component or feature.
  • Never change the component code of ANY existing component.
  • Never add new features to the root of the feature tree; add new features as sub-features.
  • Never change the product code.
  • Never change the upgrade code.

Note: The following components have been created specifically for you to add your modification:

REGISTRY_MST_FW Settings for firewall modifications
REGISTRY_MST_AV Settings for antivirus modifications
REGISTRY_MST_VPN Settings for VPN modifications

    To change the basic features of the MSI file:

    1. In the MSI editor, go to File > Open.
    2. Select target.
      The following message appears:
      "You have chosen to open an MSI file that contains files but does not contain the file source paths. These paths are required if the project is to be rebuilt. Do you wish to convert this to an MSI file that MaSaI Installer can build with the current file paths?"

      Select yes to continue.

    3. Go to the tab, All Tables > Feature.
    4. Disable the Firewall and Antivirus features by entering the following:
      Feature Level Attribute
      FW 0 0
      AV 0 0
      Drivers_AV 101 0
      Drivers_FW 101 0
      REGISTRY_AV 101 0
      REGISTRY_FW 101 0

    5. Select Property in the All Tables tab.
    6. Set the AgreetoLicense Property to Yes.
    7. Set the _IsSetupTypeMin Property to Custom.
      • Save and close the file.
      • Select the Create a transform for an existing MSI file icon.
      • In the Select base MSI field, select the original MSI file.
      • In the How to create a transform field, select Create a transform from the difference of 2 MSI's from the list.
      • Select the target file.
      • In the Save As field, enter a name for the MST (transform file). For example, customFortiClient_1.
      • Select Go.
        The following message appears:

        "The transform file <FILE location> has been created successfully. It will now be opened so you can make further changes."
      • Select OK.

      If no other changes are necessary, save and close the file.

      For additional command line options, see the related article "FortiClient installation options".