Visitor III

Question

cannot longer connect FortiClientVPN 7.2.2.0116 Azure SAML MFA

Forum|Forum|3 years ago
September 25, 2023
61 replies
44584 views

Hello,

since updating iPhone iOS from the last version 16 to the current 17.0.1, connecting via FortiClientVPN is no longer possible. The Azure SAML authentication takes place, but it stops at "Connection".
FortiClient VPN 7.2.2.0116
Fortigate 7.2.5 build1517
Can anyone here report the same problem?

FortiClient

Show previous replies

Support125

New Member

Hi,

I observed the same issue. By disabling DTLS on Fortigate side, VPN SSL connection (SAML Azure AD + conditional access) succeed.

Can you confirm that point on your side ?

kcheng

Staff & Editor

Hi @Support125

This is the same behavior that we observed for users in this thread where iOS users with FortiClientVPN 7.2.2.0116 connecting to Azure SAML. Do keep an eye if this has been fix in the future release where you will be able to reenable the DTLS on FortiGate once again.

sbaechler

Visitor III

We got it working by disabling DTLS in the FortiGate settings.

Fortinet is working on an update that fixes the issue.

jhe

Visitor III

Hi.

Can someone with DTLS disabled confirm if VNC connections from iOS work?
We are having issues connecting VNC through the SSL tunnel.
We have observed that VNC works fine if we disable SAML and enable DTLS. But does not work with DTLS disabled. Using Forticlient EMS (workaround) with DTLS and SAML enabled VNC does not work.

I'm trying to confirm if this is related to the discussed issue.

kcheng

Staff & Editor

Hi @jhe

Your issue sounds different from this. If you are able to connect to SSLVPN, but failed to access VNC after getting connected, the symptoms are different. I'd suggest that you create a support ticket for our team member to further assist you on this.

sbaechler

Visitor III

VPN is also working with the FortiClient app. (Not FortiClient VPN). It can be used for 30 days.

I am a bit worried why the fix for the free app is taking so long. What would happen if there was a security issue with the free client?

Derekr

Explorer

Is there any update on this issue, specifically some kind of ETA as to when the App is going to be released as this is causing significant issues for members of my staff that use iPhones to connect and the 30 day expiry just makes things worse for remote workers

PBalochini

Explorer II

No ETA for while. The only work-around is to disable dtls-tunnel and all iphones will be able to connected as before.

config vpn ssl settings
set dtls-tunnel disable
end

MPG

New Member

Good morning together,

today there was an update on iOS to Version 7.2.3, after installing i can no longer connect the VPN tunnel.

We have disabled the dtls-tunnel in case of the issues with version 7.2.2, but this help not for the new verion 7.2.3. I try enable dtls-tunnel, but this will also not work. :(

xDivour

Visitor III

Working fine after the update on my end we still have dtls disabled from the 7.2.2 version. Do you have devices still on 7.2.2 that can confirm its still working for them?

CRPL_Mike

New Member

We utilize Azure SAML and had implemented the DTLS workaround for use with Forticlient v7.2.2 for iOS. After updating to v7.2.3 and reversing that change in the Fortigate, the SSL-VPN connection works successfully for us.

FortiOS v7.2.5

jcordero

Visitor III

I tested it with the new Forticlient VPN version (7.2.3.0123) on IOS 17.0.3. It works!

MPG

New Member

I am Running iOS 17.1.1. on my iPhone, Forticlient Version 7.2.3 & FortiOS 7.4.1 and can no longer connect after update to this Version. The 7.2.2. clients works without any problems. :(

bucky23

Visitor III

I am running iOS 17.3 on ipad and iphones and Forticlient VPN version 7.2.4.0125 and we cannot get VPN to go once we hit "connect". It comes up with a blank white screen "about:blank"