FortiClient - Unable to connect to VPN

[PlatformTeam]

We have a number of MacOS clients using the latest FortiClient version (7.2.4.0850)

When a user attempts to connect to the configured VPN, we see the SAML popup in the browser and the client tries to connect, connects and seemingly hangs up immediately.

If I look at the web UI admin interface, I can see the incoming connection

* action: tunnel-up, reason: login successfully

* action: ssl-alert, reason: warning                  <---- (usually, I get several of these)
* action: tunnel-down, reason: User requested termination of service

This generally takes 3-4 seconds to complete

Can anyone guide me in debugging this further?

Thanks in advance

[Umer221]

Hello @PlatformTeam ,

Is it a full tunnel or split tunnel?
Do you see any users with Windows PC having similar issue?

[PlatformTeam]

Hi Umer

It is a split-tunnel and we dont have any Windows users.

The Mac is running Sequoia 15.0.1 if that helps

Thank you

[Umer221]

Try using the following article to allow the permissions:
https://docs.fortinet.com/document/forticlient/7.4.0/macos-release-notes/223986/special-notices

[PlatformTeam]

All of these permissions are set but still the user reports that his client randomly drops out.

At this times, internet access remains and so we dont believe that this is connected with his internet connection etc.

Are there any tools within the Fortinet suite which can validate that everything is setup correctly on the client side?

[Umer221]

Please try these 2 steps:
1. Try a different PC or a mac to test connection using the same user credentials.

2. Run the following commands on FortiGate CLI, and then connect from the affected mac. Download the logs and attach in response here:

diagnose debug application samld -1

diagnose debug application sslvpn -1

dia deb en