Client IPsec VPN on MacOS - can NOT save config

[René]

We are in the process of migrating from Forticlient SSL-VPN to IPsec VPN (over TCP443).
When I configure an IPsec VPN connection, I can't save the configuration; the "save" button doesn't work. An SSL-VPN configuration can be saved.
For the test, we're using a free version of Forticlient VPN, version 7.4.3.

I've also tried a previous version, 7.2.11. I've uninstalled it several times and also performed a manual cleanup of Forticlient files. As far as I can tell, I have all the permissions correct on macOS (Sequoia 15.6).

Fortinet support isn't helping because this test client doesn't have EMS.

So, I'm hoping this community can help me.

Is anyone else experiencing a similar issue?

[AEK]

Did you check the special notice?

https://docs.fortinet.com/document/forticlient/7.4.3/macos-release-notes/223986/special-notices

On the other hand, they said the free version "Only supports a limited version of the Remote Access feature". It is not so clear but it may explain your issue.

https://docs.fortinet.com/document/forticlient/7.4.0/administration-guide/269675

[René]

Hello AEK,
I'm aware of the items listed under special notices.
The only difference is that under Network Extensions, I only have FortiTray listed, and it's enabled, of course.

So what else it could be is a mystery.

[AEK]

Hi René

Unfortunately I don't have a Mac to test, but I suppose this is due to the free versions limitations.

Hope other forum member with a Mac can confirm the issue.

However I confirm on Windows I can save the config when using IPsec over TCP.

[funkylicious]

hi,

macOS user here with FCT 7.4.3

i cannot seem to find a way to add a IPsec over TCP configuration directly in FortiClient.

i only saw this option in EMS to configure it or as a workaround maybe to backup the config with a standard IPsec profile, export it > add/modify it > then import it back.

are you using EMS ?

[René]

Hi,

I am not using EMS. 

With IPsec VPN I actually mean tab which says IPsec VPN. And in the Windows version I saw the config option IPsec over TCP as encapsulation.

In the Mac this option is also not visible. Very strang. It looks like that 7.4.3 is not mature yet.

According Fortinet documentation, the free version of FGC can be used for IPsec VPN. 

[funkylicious]

hi,

a basic IPsec VPN profile works for me, i can save it.

as for IKE over TCP i think this will only work via EMS for macOS to be configured ( would need to test it in order to confirm ), in Windows indeed it's available by default when selecting IKEv2 but not here.

L.E. cannot test the configuration from EMS for IPsec over TCP on macOS due to the fact that FCT 7.4.3 is affected by a known issue where when the computer goes to sleep it disconnects my VPN, which doesnt happen with 7.4.1 and I recall reading in another post that this will be fixed in 7.4.4

[René]

Thx for reply, in which version of FCT can you actually save the config? despite the option for IPsec over TCP.

[funkylicious]

tested in both 7.4.1 which i currently used and 7.4.3 .

[René]

Hello, did you do extra settings on the Macbook for this?