Skip to main content
atsy
New Member
April 11, 2024
Solved

FortiClient VPN permission error on MacOS

  • April 11, 2024
  • 3 replies
  • 136111 views

I've installed FortiClient VPN only version and gave it full-disk and VPN permissions (to both: FortiClient.app and fctservctl2).

But when I try to connect to a VPN, it shows me an error: "To connect to a VPN with FortiClient, open Security & Privacy Settings and allow system software from FortiTray.". I've wanted to try to add FortiTray.app to the whitelist as well, but I cannot do it since it's located inside the FortiClient.app package.

How do I fix this?

Best answer by Dulasalem

I found the solution :) 

go to setting - general - login item & extentions.

scroll down to extentions and click on "i" infront of network extention and allow the fotiTray.app

 

Screenshot 2024-09-25 at 11.14.24 AM.png

 

3 replies

ozkanaltas
Valued Contributor III
April 11, 2024

Hello @atsy ,

 

Did you do VPN step from this document?

 

You need to go System Preferences > Security & Privacy and allow FortiTray app

 

https://docs.fortinet.com/document/forticlient/7.2.4/macos-release-notes/223986/special-notices

atsy
atsyAuthor
New Member
April 11, 2024

Hi @ozkanaltas,

I've tried re-installing the app multiple times in order to do it, but this prompt never appeared

ozkanaltas
Valued Contributor III
April 11, 2024

Hello @atsy ,

 

Reinstall the FortiClient can't solve your problem. You need to click allow button on this screen. 

 

 

image.png

 

Frend
Visitor III
May 15, 2024

Hello!

I am bumping into the exact same problem. 

No mention of Fortitray anywhere under my Privacy and Security window and no place where I might be able to allow it.
I have spent half day trying to install various older versions of the clients but same problem appears for full and free VPN client.

https://pasteboard.co/aQMHOlKvTKIS.png

https://pasteboard.co/YAWgDBQgYzIn.png


Best Regards,
Erkki S. 

Frend
Visitor III
June 19, 2024

Hello!

I found the cause of the problem and a working solution!

We are using MDM and it preapproves the TeamID-s.

Check if vpn extensions are allowed with 

systemextensionsctl list


If the teamID is not explicitly allowed from MDM with allowed extension profile then it is silently forbidden.

Ask your MDM admin create new allowed extension profile with following team-id and roll it out for your Mac:

AH4XFXJ7DK

 
Regards,
Erkki Saaremets

In_HLee
Staff
Staff
September 25, 2024

FCT macOS 7.4.0 Release Notes has been updated as per the feedback.