Fortinet white logo
Fortinet white logo

Installing the FortiNBI application

Installing the FortiNBI application

When a FortiProxy user with a matching policy that has the isolator profile attempts to access a website on a machine without the FortiNBI service running, the user will see the following prompt page with a download link to the FortiNBI installer.

To install the FortiNBI application:
  1. Click the FortiNBI installer link on the browser isolation replacement page to download the installer.

  2. Run the installer with an administrator account:

    1. .NET Runtime 7.0 and Windows App SDK 1.4 are automatically installed. If the automatic installation fails, you must manually download and install these components from the Microsoft website:

    2. Files are unpacked to the installation folder, by default C:\Program Files (x86)\Fortinet\FortiNBI.

    3. The FortiNBI GUI is registered as a task that runs automatically every time that a user logs on.

  3. FortiNBI starts automatically, followed by isolator and extension installations:

    1. FortiNBI checks if the system has Windows Subsystem for Linux (WSL) and Virtual Machine Platform enabled. If not, the installer will automatically enable and configure it.

    2. The isolator image is downloaded from the FortiProxy's portal through HTTPS, extracted to a temporary folder, imported to the system, and then the temporary files are removed.

    3. After the installation procedure finishes, restart the browser (if the browser is already open) for the FNBI extension to be installed. Reboot Windows when requested.

    4. If using Firefox, the first time that you use FortiNBI you will see a prompt page with instructions to enable browser permissions to access site data. Follow the instructions to enable the browser permissions.

  4. When required, the client will receive an RDP pop-up window for isolation.

Upgrading FortiNBI

When a new FortiNBI version is available, you can upgrade your FortiNBI version without upgrading your FortiProxy:

  1. Upload the latest FortiNBI installer to FortiProxy by running the following command:

    execute upload fortinbi-installer cloud

  2. Restart FortiProxy for the new FortiNBI installer to take effect.

  3. Verify the uploaded FortiNBI installer version by running the diag wad nbi status command.

  4. Open a website. You will be prompted with download link to the new version of FortiNBI installer.

  5. Follow the prompts to install the new FortiNBI version.

  6. Restart the browser (if the browser is already open) for the FortiNBI extension to be installed. Reboot Windows when requested.

  7. Verify the current FortiNBI version in the About tab of the FortiNBI application.

Installing the FortiNBI application

Installing the FortiNBI application

When a FortiProxy user with a matching policy that has the isolator profile attempts to access a website on a machine without the FortiNBI service running, the user will see the following prompt page with a download link to the FortiNBI installer.

To install the FortiNBI application:
  1. Click the FortiNBI installer link on the browser isolation replacement page to download the installer.

  2. Run the installer with an administrator account:

    1. .NET Runtime 7.0 and Windows App SDK 1.4 are automatically installed. If the automatic installation fails, you must manually download and install these components from the Microsoft website:

    2. Files are unpacked to the installation folder, by default C:\Program Files (x86)\Fortinet\FortiNBI.

    3. The FortiNBI GUI is registered as a task that runs automatically every time that a user logs on.

  3. FortiNBI starts automatically, followed by isolator and extension installations:

    1. FortiNBI checks if the system has Windows Subsystem for Linux (WSL) and Virtual Machine Platform enabled. If not, the installer will automatically enable and configure it.

    2. The isolator image is downloaded from the FortiProxy's portal through HTTPS, extracted to a temporary folder, imported to the system, and then the temporary files are removed.

    3. After the installation procedure finishes, restart the browser (if the browser is already open) for the FNBI extension to be installed. Reboot Windows when requested.

    4. If using Firefox, the first time that you use FortiNBI you will see a prompt page with instructions to enable browser permissions to access site data. Follow the instructions to enable the browser permissions.

  4. When required, the client will receive an RDP pop-up window for isolation.

Upgrading FortiNBI

When a new FortiNBI version is available, you can upgrade your FortiNBI version without upgrading your FortiProxy:

  1. Upload the latest FortiNBI installer to FortiProxy by running the following command:

    execute upload fortinbi-installer cloud

  2. Restart FortiProxy for the new FortiNBI installer to take effect.

  3. Verify the uploaded FortiNBI installer version by running the diag wad nbi status command.

  4. Open a website. You will be prompted with download link to the new version of FortiNBI installer.

  5. Follow the prompts to install the new FortiNBI version.

  6. Restart the browser (if the browser is already open) for the FortiNBI extension to be installed. Reboot Windows when requested.

  7. Verify the current FortiNBI version in the About tab of the FortiNBI application.