New Member

Question

Forticlient 7.4 - Stuck at connecting and MFA/fortitoken not prompting on reconnect

13 replies
12788 views

After we upgraded Win10/11 clients to the Forticlient 7.4 version, we experienced the forever connecting issues like others. Additionally, we found that after supplying the fortitoken on the first connection, the subsequent attempt did not prompt for a token/code. This was repeatable behavior on the 7.4 client and occurred after an immediate reconnect and rebooting before reconnecting.

We worked with support to troubleshoot and found that backing down to Forticlient 7.0.13 resolved the connectivity and token issues. We do not pay for client support so our tech was unable to reach out to the client team on this MFA/token issue.

Has anyone else experienced this behavior in Forticlient 7.4?

Reinstalling the redistributable did not help with these issues either.

FortiClient

nradia_FTNT

Staff

Hello,

If you are using SAML, there is a known issue related with FortiClient 7.4

But following debugs may help you further when reproducing the issue:

get system status
config vpn ssl settings
Show full
get
end
diagnose debug reset
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug console timestamp enable
diagnose vpn ssl debug-filter src-addr4 x.x.x.x <---------------Clients Public IP
diagnose debug enable
diagnose debug application samld -1

sw2090

SuperUser

if there is no token promt you could enter password+token in password field too.

shamalphaAuthor

New Member

The problem is that we are connecting to VPN on subsequent attempts without being prompted for a token. This is using Fortitokens and not a third-party MFA.

SonaMuvv

Staff

Hello,

Can you please check the username, Fortigate is case sensitive by default.

Also for testing, can you try to remove the token and re-assign the token for a user and test the login again.

sw2090

SuperUser

just to avoid misunderstandings: what I wrote can also be done in FortClient. If it don't promt for Tokencode try to enter it behind the password in password field. FortiGate side will handle this.

shamalphaAuthor

New Member

The issue is more that the Forticlient is making a successful connection without prompting for the Fortitoken.

Hong_FTNT

Staff & Editor

Hi @shamalpha,

In that case, you need to collect debugs and check your configuration to make sure MFA is actually enabled for that user.

diagnose debug reset
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug console timestamp enable
diagnose vpn ssl debug-filter src-addr4 x.x.x.x <---------------Clients Public IP
diagnose debug enable

Regards,

AGU_HD

Explorer

Trying installing this Visual Studio Redistributable: https://aka.ms/vs/17/release/vc_redist.x64.exe

The Forticlient VPN Application is trying to start fortitray.exe, but it needs a .dll file to work (mfc140u.dll) which is missing from Windows.

After installing and a reboot, your Forticlient VPN app should work again.

casepros

New Member

I got 7.4 to work on my Windows 10 Pro Machines. Cannot get it to work on Windows 10 Home. I know remote desktop doesn't work on Home. Is it the same for Fortinet Client?

Sign up

Login with SSO

Login to the community

Login with SSO