Skip to main content
davidsteelerose
New Member
July 21, 2021
Solved

FortiClient VPN on MacOS Monterey - error code: -121

  • July 21, 2021
  • 6 replies
  • 117080 views

I upgraded to test the beta version of Monterey. 

FortiClient6.0.9.162

 

The VPN connection terminates unexpectedly! (Error Code: -121)

 

 

20210721 10:59:08.513 [sslvpn:INFO] unknown:0 dns suffix: 20210721 10:59:08.513 [sslvpn:INFO] unknown:0 epctrl ping server: 20210721 10:59:08.514 [sslvpn:INFO] unknown:0 xml parsing split tunnel info 20210721 10:59:08.514 [sslvpn:INFO] unknown:0 xml parse split tunnel info success. Buffer length: 94 bytes 20210721 10:59:08.514 [sslvpn:INFO] unknown:0 blocked all ipv6 traffic 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 begin io loop 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 launch ssl read thread 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 launch tty read thread 20210721 10:59:08.515 [sslvpn:INFO] unknown:0 ssl read thread started 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 main thread waiting for threads termination 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 tty read thread started 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 ssl write thread started 20210721 10:59:08.516 [sslvpn:INFO] unknown:0 tty write thread started 20210721 10:59:08.536 [sslvpn:INFO] unknown:0 pppd may die...trying to fix it 20210721 10:59:08.536 [sslvpn:INFO] unknown:0 pppd may die...trying to fix it 20210721 10:59:40.617 [sslvpn:EROR] unknown:0 ppp interface is not up, so terminate sslvpn 20210721 10:59:40.618 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.617 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.618 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.618 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal 20210721 10:59:40.623 [sslvpn:INFO] unknown:0 io loop finished 20210721 10:59:40.623 [sslvpn:INFO] unknown:0 io finished, kill pppd 20210721 10:59:40.624 [sslvpn:INFO] unknown:0 kill_child:1144 20210721 10:59:40.624 [sslvpn:INFO] unknown:0 tunnel shutdown 0 20210721 10:59:40.624 [sslvpn:INFO] unknown:0 sslvpn starts to clean up 20210721 10:59:40.626 [sslvpn:INFO] unknown:0 sslvpnd terminated

    Best answer by keeno

    I had a similar problem with "old" version of FC (Sorry I don't remember which one, since I didn't check before uninstall): every time I tried to connect, it said it couldn't, without any error message. I tried to download version 7 from site but I had another problem (it was "forticlientupdate" app and it gave the message "no updates found" - that's why I uninstalled the old one, to try to avoid this behavior). I came here and I found, in another thread, a hint to download offline installer, so I got version 7.0.0.0022 and it worked like a charm.

    Hope this could help

    6 replies

    davidsteelerose
    New Member
    July 28, 2021

    Has anyone tried FortiClient on the new version of MacOS Monterey and been successful?

    AlmightyBob
    New Member
    July 28, 2021

    been trying on builds since beta 2 including yesterday's (27 July) release w/ no success. unfortunately we have to run vmware and go through a windows or ubuntu vm to get into the office.

     

    the logs just show an extensive amount of this (below, over and over) followed by some IPv6 failed attempts just before it fails to connect.

     

    Running on an intel 2019 macbook pro.

     

    <?xml version='1.0' encoding='utf-8'?><sslvpn-tunnel ver='2' dtls='1' patch='1'><dtls-config heartbeat-interval='10' heartbeat-fail-count='10' heartbeat-idle-timeout='10' client-hello-timeout='10' /><tunnel-method value='ppp' /><tunnel-method value='tun' /><fos platform='FG100D' major='6' minor='02' patch='2' build='1010' branch='1010' /><auth-ses check-src-ip='1' tun-connect-without-reauth='0' tun-user-ses-timeout='30' /><client-config save-password='off' keep-alive='off' auto-connect='on' /><ipv4><dns domain='...' /><dns ip='...' /><dns ip='...' /><assigned-addr ipv4='...' /></ipv4><idle-timeout val='0' /><auth-timeout val='28800' /></sslvpn-tunnel>
    ----
    20210714 12:37:01.778 [sslvpn:INFO] unknown:0 dns suffix: ...
    20210714 12:37:01.778 [sslvpn:INFO] unknown:0 epctrl ping server:
    20210714 12:37:01.778 [sslvpn:INFO] unknown:0 begin io loop
    20210714 12:37:01.778 [sslvpn:INFO] unknown:0 launch ssl read thread
    20210714 12:37:01.779 [sslvpn:INFO] unknown:0 launch tty read thread
    20210714 12:37:01.779 [sslvpn:INFO] unknown:0 ssl read thread started
    20210714 12:37:01.779 [sslvpn:INFO] unknown:0 main thread waiting for threads termination
    20210714 12:37:01.779 [sslvpn:INFO] unknown:0 ssl write thread started
    20210714 12:37:01.779 [sslvpn:INFO] unknown:0 tty read thread started
    20210714 12:37:01.779 [sslvpn:INFO] unknown:0 tty write thread started
    20210714 12:37:01.859 [sslvpn:INFO] unknown:0 got peer's ip address
    20210714 12:37:02.779 [sslvpn:INFO] unknown:0 ppp interface is up
    20210714 12:37:02.780 [sslvpn:INFO] unknown:0 Current dns 0: ...
    20210714 12:37:02.781 [sslvpn:INFO] unknown:0 No wins is set currently
    20210714 12:37:03.855 [sslvpn:INFO] unknown:0 try to get ppp's ip address ...
    20210714 12:37:03.861 [sslvpn:INFO] unknown:0 No split tunnel is specified
    20210714 12:37:03.863 [sslvpn:INFO] unknown:0 ppp address: ...
    20210714 12:37:03.863 [sslvpn:INFO] unknown:0 sending sslvpn up message to vpn controller. ping server is  allow_save_password:0 allow_keep_alive:0 allow_auto_connect:1
    20210714 12:37:03.868 [sslvpn:INFO] unknown:0 launch DNS monitor thread
    20210714 12:37:03.868 [sslvpn:INFO] unknown:0 DNS monitor thread started
    20210714 12:37:03.876 [sslvpn:INFO] unknown:0 DNS changed
    20210714 12:37:03.882 [sslvpn:INFO] unknown:0 Current DNS and DNS got from FGT are same, no needs to reset
    20210714 12:43:52.675 [sslvpn:INFO] unknown:0 shuting down the running tunnel
    20210714 12:43:52.676 [sslvpn:INFO] unknown:0 the tunnel is shut down
    20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20210714 12:43:52.676 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20210714 12:43:52.715 [sslvpn:INFO] unknown:0 io loop finished
    20210714 12:43:52.736 [sslvpn:INFO] unknown:0 io finished, kill pppd
    20210714 12:43:52.768 [sslvpn:INFO] unknown:0 kill_child:7493
    20210714 12:43:52.790 [sslvpn:INFO] unknown:0 tunnel shutdown 0
    20210714 12:43:52.820 [sslvpn:INFO] unknown:0 sslvpn starts to clean up
    20210714 12:43:52.843 [sslvpn:INFO] unknown:0 shuting down the running tunnel
    20210714 12:43:52.843 [sslvpn:INFO] unknown:0 the tunnel is shut down
    20210714 12:43:52.862 [sslvpn:INFO] unknown:0 sslvpnd terminated
    20210715 09:53:01.418 [sslvpn:INFO] unknown:0 current uid: 0
    20210715 09:53:01.419 [sslvpn:INFO] unknown:0 get current proxy auto config settings
    20210715 09:53:01.423 [sslvpn:INFO] unknown:0 use tty:/dev/ttys000
    20210715 09:53:01.425 [sslvpn:INFO] unknown:0 connecting to ...:... - ...
    20210715 09:53:01.521 [sslvpn:INFO] unknown:0 [DoLicCheck]...
    20210715 09:54:12.548 [sslvpn:INFO] unknown:0 shuting down the running tunnel
    20210715 09:54:12.548 [sslvpn:INFO] unknown:0 the tunnel is shut down
    20210715 09:54:12.549 [sslvpn:INFO] unknown:0 [DoLicCheck]: GET /remote/licensecheck ... (usr=(null), send 585 of 585 bytes):
    GET /remote/licensecheck HTTP/1.1
    Host: sslvpn
    Cookie: SVPNCOOKIE=+...

    davidsteelerose
    New Member
    July 28, 2021

    Thank you AlmightyBob.

     

    Hopefully we will hear from someone at Fortinet that they are aware of this issue and if there are workarounds. 

     

    I'm going to give it another week, while I'm on vacation, before I roll back my MacOS. There are plenty of things that could be broken, but the FortiClient is one that I can't do without!

     

     

    keeno
    keenoAnswer
    New Member
    July 29, 2021

    I had a similar problem with "old" version of FC (Sorry I don't remember which one, since I didn't check before uninstall): every time I tried to connect, it said it couldn't, without any error message. I tried to download version 7 from site but I had another problem (it was "forticlientupdate" app and it gave the message "no updates found" - that's why I uninstalled the old one, to try to avoid this behavior). I came here and I found, in another thread, a hint to download offline installer, so I got version 7.0.0.0022 and it worked like a charm.

    Hope this could help

    davidsteelerose
    New Member
    July 29, 2021

    I was wondering if there was a way to install FortiClient without the Online Installer.dmg that detects current version. Mine also says no new client available. 

     

    Does anyone have a link to any page listing all client versions for macOS or know where I can download the most current version as an Offline Installer as suggested in this post?

    keeno
    New Member
    July 29, 2021

    I found the solution to download offline installer in this message, as I wrote before:

     

    https://forum.fortinet.com/FindPost/193145

     

    Just checked the XML that appears and copied/pasted the right string at the end of address

     

    Hope this helps

    Frank67TS
    New Member
    November 2, 2021

    Mha non so se ti potrà essere utile però io ho risolto installando FortiClinet Vpn aggiornato alla versione per MacOs 7.0.0.0022..una volta scaricata ho spostato come di consueto l'app nella cartella applicazioni.

    Inoltre una volta scaricata l'app nella cartella Applicazioni ho aperto il pacchetto contenente l'app con l'applicazione Installer.app...confermato dove chiedeva conferma fino all'avvenuta installazione.

    Poi l'applicazione ha funzionato e ha mantenuto la connessione senza problemi.

    p.s. ho un Mac mini del 2018 con chip intel.  

    Tpoxa
    New Member
    November 6, 2021

    Just installed Monterey, Forti client stopped working.

    Just re-installed it from https://www.fortinet.com/support/product-downloads#vpn (7.0.0.22), works with no issues.

    lokutus25
    New Member
    November 9, 2021

    Bump.

    The downloadable Forticlient VPN 7.0.2 is not working on the latest Mac OS Monterey.

    Is this a known issue? Should our customers migrate to Palo Alto?

     

    Tpoxa
    New Member
    November 9, 2021

    7.0.1.0060 works for me after I uninstalled and installed it again.

    lokutus25
    New Member
    November 9, 2021

    Hi Tpoxa, are you talking about the Forticlient VPN (only) or the full version?

    Now seems the full version is working but not the free VPN version.

    Thx

     

     

    SS1
    New Member
    January 3, 2022

    Hi,

     

    Dont work in my environment: Log say “ppp interface is not up”

     

    0220103 15:31:17.425 [sslvpn:INFO] unknown:0 dns suffix: ad.xxxxx.xx
    20220103 15:31:17.425 [sslvpn:INFO] unknown:0 epctrl ping server:
    20220103 15:31:17.425 [sslvpn:INFO] unknown:0 xml parsing split tunnel info
    20220103 15:31:17.425 [sslvpn:INFO] unknown:0 xml parse split tunnel info success. Buffer length: 1038 bytes
    20220103 15:31:17.425 [sslvpn:DEBG] unknown:0 PPP
    20220103 15:31:17.425 [sslvpn:EROR] unknown:0 Error: ioctl CTLIOCGINFO: No such file or directory
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 blocked all ipv6 traffic
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 begin io loop
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 launch ssl read thread
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 launch tty read thread
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 ssl read thread started
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 main thread waiting for threads termination
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 tty read thread started
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 ssl write thread started
    20220103 15:31:17.426 [sslvpn:INFO] unknown:0 tty write thread started
    20220103 15:31:17.426 [sslvpn:DEBG] unknown:0 begin to write to ssl
    20220103 15:31:17.473 [sslvpn:INFO] unknown:0 pppd may die...trying to fix it
    20220103 15:31:49.264 [sslvpn:EROR] unknown:0 ppp interface is not up, so terminate sslvpn
    20220103 15:31:49.265 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 reveive SIGUSR1 signal
    20220103 15:31:49.266 [sslvpn:INFO] unknown:0 io loop finished
    20220103 15:31:49.267 [sslvpn:INFO] unknown:0 io finished, kill pppd
    20220103 15:31:49.267 [sslvpn:INFO] unknown:0 kill_child:70145
    20220103 15:31:49.268 [sslvpn:INFO] unknown:0 tunnel shutdown 0
    20220103 15:31:49.269 [sslvpn:INFO] unknown:0 sslvpn starts to clean up
    20220103 15:31:49.292 [sslvpn:INFO] unknown:0 sslvpnd terminated

    WIXI
    Visitor III
    August 25, 2023

    Chic@s les dejo unas versiones de Forti en el siguiente link, quizás les puede servir. A mí me sirvió una de esas versiones en macOS Monterey Versión 12.6.8.
    https://drive.google.com/drive/u/1/folders/1FA8LQX9rSLNt6IIhP68PwOzQYg_7zPwZ