All VPN users must upgrade to the latest tested and approved version of FortiClient and enable multi-factor authentication due to security vulnerabilities with earlier versions of the software.
Please note that users with desktops on campus do not need to perform any action.
What you'll find on this page
Concordia was recently alerted by the Government of Quebec that older versions of FortiClient, Concordia’s Virtual Private Network (VPN) software, have a critical vulnerability that puts users at risk of cyber-attacks.
In an effort to strengthen the security of your VPN connection, Concordia is also asking all VPN users to enable multi-factor authentication (MFA) in their software.
A two-factor authentication process at sign-in significantly increases your account security. Enabling MFA provides greater protection for your sensitive information such as research data, personal information, and more.
If you are using a Concordia-owned device, please book a security health check as soon as possible. An IT service technician will assist you in upgrading your software and/or enabling MFA. This check will also allow a technician to update and secure your computer while you are on campus, which has been difficult throughout the pandemic.
You can schedule an appointment in your office or bring your computer to your preferred IT Service Center. Unfortunately, remote assistance will not be possible because of the work required on the VPN. The process will take approximately 30 minutes on average depending on your operating system and the version of FortiClient you are using.
If you are using a personal device, you need to uninstall your current version of FortiClient before reinstalling the latest version. If you are a faculty or staff member, please ensure you enable MFA during the reinstallation/ configuration process. For detailed instructions, please see below.
NOTE: For students, please do not enable multi-factor authentication (MFA) on your VPN unless you’ve enabled MFA on your Concordia account, doing so may lead to you being locked out of VPN.
No action is required.
If you are using a personal device, you need to uninstall your current version of FortiClient before reinstalling the latest version and enabling MFA.
Click on Start and search for ‘Add or Remove Programs’.
Search for FortiClient under the software list.
Click on FortiClient VPN and select ‘Uninstall’.
Follow the prompts to complete the uninstallation.
Reboot your computer.
Download the Latest version of the FortiClient from the Concordia Hub
Double-Click the FortiClientUninstaller App in your application folder.
Click Uninstall, the uninstaller will run on its own.
Download the Latest version of the FortiClient from the Concordia Hub
Open “System Preferences” and then “Security and Privacy”
From there you will open the “Privacy” tab and select “Full Disk Access” from the list
If FortiClient is not listed you will need to add the application to the list.
Click on the lock to unlock the ability to edit the settings
Once the installation is complete, open the FortiClient software from the applications folder on your computer and accept the license agreement
To configure your VPN Connection
Click: Configure VPN
If you have any question or concerns, contact the IT Service Desk by email at help@concordia.ca or call 514-848-2424, ext. 7613 to speak with a Service Desk agent between 8:00 a.m. and 11:00 p.m. on weekdays.
Many versions of FortiClient are not able to upgrade to the latest version. Uninstalling old versions prior to installing the latest version of FortiClient is the best method to achieve a clean upgrade.
FortiClient is available to all faculty and staff in your My CU account in Carrefour under “Apps and software”.
Please contact the IT Service Desk by email at help@concordia.ca or call 514-848-2424, ext. 7613 between 8:00 a.m. and 11:00 p.m. on weekdays and between 9:00 a.m. and 4:30 p.m. on weekends.
© Concordia University