Many interfaces when using VPN

Hello, Unfourtnaely the problem appears again with MAC computer after sleeping mode - our VPN segment is 192.168.11.200-230

Hello, It happens again:
Routing table:
Link to routing table 

It happens after waking up from sleep mode :(

Please help

Please help

Hi Captain

Here we can see IPv6 default gateways are being injected.

Internet6:
Destination   Gateway                        Flags   Netif     Expire
default       fe80::%utun0                   UGcIg   utun0
default       fe80::%utun1                   UGcIg   utun1
default       fe80::%utun2                   UGcIg   utun2
default       fe80::%utun3                   UGcIg   utun3
default       fe80::%utun4                   UGcIg   utun4
default       fe80::%utun5                   UGcIg   utun5

In case you are not using IPv6, can you just try disable it on your MacOS and try again?

Or check on FG side if IPv6 split tunnel is disable, then enable it.

Or just disable IPv6 on FG's IPsec config.

You can also remove the IPv6 default gateway through to confirm this is the actual root cause.

Again the idea is to avoid having default gateway through tunnel in your routing table.

On the IPsec config I see IPv6 is disabled on FG. That's strange because it seems something else is pushing IPv6 default gateway on the client.

Next step is, when the issue occurs, delete the IPv6 gateways on the client that are through the VPN tunnels, and see if it fixes the issue.

A command that already tested and fix the problem is:
ps aux | grep -i 'forti' | grep -v 'grep' | awk '{print $2}' | xargs sudo kill -9

Kill all the processes of Forticlient
But if I asked users to do it, they would hate me because they just want the problem solved.

Hello,

Same issue... not solved.

Attaching log from Forticlient from mac computer with multiple interfaces:

Hello,
I see in my logs of Forticlient (I use ipsec)=
message_handler:469 send pfkey errno: 1

https://pastebin.com/0vtnQXQA

Any idea please? 

User has full permissions

We tried: Reinstall other old Forticlient versions 

Thanks

This has been an endless issue for us as well, specific to Mac users, with numerous major releases of FortiClient 7 VPN-only, also ipsec, and we do use IPv6 so it's both enabled on the end stations and given out as part of a VPN connection.  It would prove interesting if this issue is all IPv6 related; that might explain why this problem isn't frequent enough to make people just abandon the platform, given how low IPv6 proliferation is even in 2025.

Even right now, after a complete uninstall of 7.4 hoping a fresh install will clean something up, I still have a FortiClient process hanging around:

0 1129 1 0 7:44AM ?? 0:00.06 /Library/Application Support/Fortinet/FortiClient/bin/fct_tunnel_ctl -s 2607:7700:0:31::d8bc:11 -l 2 -m 0 -u 4500 -t 443

(Don't worry, t-mobile IP as I was on hotspot)

This happens all the time, random stuck processes, you have to completely reboot the end user's computer to resolve it since they don't have admin access let alone the interest in running a shell script to find and kill all the forticlient processes with sudo.  This has been happening for a couple years now and our users have had it.