Installing the FortiNBI application

When a FortiProxy user with a matching policy that has the isolator profile attempts to access a website on a machine without the FortiNBI service running, the user will see the following prompt page with a download link to the FortiNBI installer.

To install the FortiNBI application:

1. Click the FortiNBI installer link on the browser isolation replacement page to download the installer.

2. Run the installer with an administrator account:

   1. .NET Runtime 7.0 and Windows App SDK 1.4 are automatically installed. If the automatic installation fails, you must manually download and install these components from the Microsoft website:

      • .NET Runtime 7.0

      • Windows App SDK 1.4

   2. Files are unpacked to the installation folder, by default C:\Program Files (x86)\Fortinet\FortiNBI.

   3. The FortiNBI GUI is registered as a task that runs automatically every time that a user logs on.

3. FortiNBI starts automatically, followed by isolator and extension installations:

   1. FortiNBI checks if the system has Windows Subsystem for Linux (WSL) and Virtual Machine Platform enabled. If not, the installer will automatically enable and configure it.

   2. The isolator image is downloaded from the FortiProxy's portal through HTTPS, extracted to a temporary folder, imported to the system, and then the temporary files are removed.

   3. After the installation procedure finishes, restart the browser (if the browser is already open) for the FNBI extension to be installed. Reboot Windows when requested.

   4. If using Firefox, the first time that you use FortiNBI you will see a prompt page with instructions to enable browser permissions to access site data. Follow the instructions to enable the browser permissions.

      

4. When required, the client will receive an RDP pop-up window for isolation.