Pushing a VPN profile created by mobileconfig to FortiClient (iOS)

To push a VPN profile created by mobileconfig to FortiClient (iOS):

1. Configure a VPN profile using Apple Configurator:
   1. On a macOS device, open Apple Configurator. Go to File > New Profile> VPN > Configure.
   2. In the Connection Type field, select Custom SSL.
   3. In the Identifier field, enter com.fortinet.forticlient.fabricagent.
   4. In the Server field, enter the VPN server of FortiGate IP address.
   5. In the Account field, enter the username.
   6. In the Provider Bundle Identifier field, enter com.fortinet.forticlient.fabricagent.packettunnel.
   7. In the User Authentication field, select Password. You can also select Certificate, which requires configuring a certificates payload in Apple Configurator. This example configures password authentication.
   8. In the Password field, enter the desired password.
   9. Save.
2. In Intune, go to Devices > iOS/iPadOS > Configuration profiles > Create > New Policy > Templates > Custom.
3. Configure a name and description as desired.
4. On the Configuration settings tab, import the mobileconfig file that you created.

   

5. Assign the profile to the desired users and groups. After the device syncs with Intune, FortiClient (iOS) lists the VPN profile under MDM VPN Gateway.