FortiClient VPN — How to Connect

ℹ️ FortiClient VPN gives you secure remote access to Argus internal resources (mapped drives, line-of-business applications, internal websites) from outside the corporate network. Use it when you're working from home, travelling, or anywhere else off-site.

🚫 DO NOT use FortiClient VPN while you are on-site at any Argus property. The VPN is designed to give you access to the internal network from outside. If you're already on-property, you're already on the network it would be connecting to — the VPN connection will fail. Just open your applications normally.

FortiClient is already installed and configured on all Argus-issued laptops that need remote access. You do not need to set it up — just open it and connect. This article walks you through using it.

📋 Before You Connect

1. Your Argus-issued laptop (FortiClient is pre-installed; if it isn't on your laptop, submit an IT ticket — don't try to install it yourself).
2. Your Argus email address and password — the same credentials you sign in to your computer with.
3. Microsoft Authenticator on your phone, set up and working. VPN requires MFA approval to connect.
4. An internet connection (home Wi-Fi, hotspot, hotel Wi-Fi, etc.).

Step 1: Find FortiClient in the System Tray

FortiClient runs in the background on your laptop. Look for its icon (a blue shield) in the system tray at the bottom-right corner of your screen, near the clock.

If you don't see the FortiClient shield icon:

• Click the ^ arrow next to the system tray to reveal hidden icons — it may be tucked away there.
• If it's still not visible, click Start and type FortiClient to launch it manually.

Step 2: Connect — Two Ways

You have two options for connecting. Both work equally well — pick whichever you prefer.

Option A — Quick Connect From the Tray (Fastest)

1. Right-click the FortiClient shield icon in the system tray.
2. A small menu appears with several options.
3. Click Connect to "[Site] SSL VPN" (the name will be specific to your site).

This is the fastest way to connect — one right-click, one menu click, and you're connecting.

Option B — Through the FortiClient Console

If you prefer to see the full FortiClient window:

1. Left-click (or double-click) the FortiClient shield icon in the system tray. (Or right-click and choose Open FortiClient Console.)
2. The FortiClient window opens.
3. In the left-side menu, click Remote Access (it may already be selected).
4. You'll see your site's VPN listed (e.g., [Site] SSL VPN).
5. Click the Connect button on the right.

Step 3: Approve the MFA Request on Your Phone

Whichever option you used, the next thing that happens is the same:

1. After a few seconds, Microsoft Authenticator on your phone will display a sign-in approval request.
2. Tap Approve on your phone.

If you don't receive a prompt within 30 seconds:

• Check that your phone has internet access (Authenticator needs an internet connection to receive prompts).
• Open the Microsoft Authenticator app manually — pending approvals may be visible inside the app even if no notification appeared.

Step 4: Verify You're Connected

After approving the MFA prompt, FortiClient connects within a few seconds.

You can confirm by opening the FortiClient console (left-click the tray icon). The VPN entry will now show:

• A green "Connected" indicator
• Your assigned IP address (typically starting with 10.x.x.x)
• A duration timer counting up
• A Disconnect button (instead of Connect)

You can now access internal Argus resources — mapped drives, internal websites, OPERA Cloud, internal SharePoint sites, etc.

How to Disconnect

When you're done working remotely:

1. Right-click the FortiClient tray icon.
2. Click Disconnect "[Site] SSL VPN".

Or, open the FortiClient console and click the Disconnect button on the VPN entry.

You can also just close your laptop or sign out of Windows — that will end the VPN session automatically. But explicitly disconnecting when you're done is good practice.

🚫 If You're On-Site at an Argus Property

If you're physically at an Argus property (hotel, restaurant, corporate office) and trying to connect to VPN, it will not work — and that's expected.

Why: The VPN connects you into the Argus network from outside. If you're already on the Argus network at a property, there's nothing for it to connect to.

What to do instead:

• You don't need VPN while on-property — the local network already provides access to internal resources. Open your applications normally.
• If you can't access something you need while on-property, that's not a VPN issue. Submit a ticket describing what you're trying to access.

Common Problems

"Cannot connect to remote gateway" / "Server not responding"

Most likely your internet connection is down or unstable.

1. Open a web browser and try to load google.com.
2. If the browser works but FortiClient doesn't, the network you're on (hotel, coffee shop, restaurant) may be blocking VPN traffic. Try a different network — a phone hotspot is usually a good test.
3. If the browser also doesn't work, your internet connection is down. Fix the internet first.

"Authentication failed" / "Invalid credentials"

1. Verify your password works by signing in at www.outlook.com in a browser using the same email and password.
2. If www.outlook.com works → the issue is specific to VPN. Submit a ticket.
3. If www.outlook.com fails → your password may have expired. See the Outlook Keeps Prompting for Password — First Steps article.

Remember the lockout policy: 3 incorrect password attempts will lock your account for 5 minutes. If you've been retrying, wait the full 5 minutes before trying again.

"I'm connected but can't reach internal resources"

1. Make sure FortiClient shows the green "Connected" indicator and an IP address.
2. Try accessing one of these to test:
   - A mapped drive
   - The OPERA Cloud login page
   - A known internal website
3. If only ONE specific resource fails, the issue is with that resource, not VPN. Submit a ticket for that specific resource.
4. If NOTHING internal works while VPN says Connected, disconnect and reconnect, then test again.

"No MFA prompt arrives on my phone"

1. Check your phone has internet access (try opening a website on the phone).
2. Open Microsoft Authenticator manually — pending approvals may be visible inside the app even if no notification was pushed.
3. If you recently changed phones, see the Setting Up Microsoft Authenticator on a New Phone article — your Authenticator setup may need to be re-registered.

"FortiClient is missing from my laptop"

Don't try to download or install FortiClient yourself. Submit an IT ticket — we'll handle it.

When to Submit a Ticket

Submit a ticket if:

• You've gone through the steps above and VPN still won't connect.
• VPN connects but a specific internal resource you need isn't accessible.
• FortiClient is missing from your laptop.
• You're getting an error message not covered above.
• You need VPN access on a new laptop that hasn't been configured yet.

What to Include in Your Ticket

To resolve this quickly, please tell us:

1. Your laptop's asset tag number — the small Argus IT label on the device (front, side, top, or bottom).
2. Your Argus email address.
3. Where you're trying to connect from — home, hotel, coffee shop, etc. (Not an Argus property — see the warning above.)
4. What error message you're seeing, if any (screenshot is ideal).
5. Did FortiClient ever work for you from this location? If yes, what changed?
6. What you've already tried from this article.
7. Can you sign in to www.outlook.com from the same internet connection? Yes / No.

Related Articles

• Setting Up Microsoft Authenticator on a New Phone
• Outlook Keeps Prompting for Password — First Steps
• How to Request New Hardware (laptops, monitors, accessories)

KB-40001 | Created: May 20, 2026