FortiClient VPN Problems With OSX 10.11 El Capitan

[danjahner]

I installed the GM candidate of Mac OS X 10.11 El Capitan and my FortiClient VPN has stopped working. It completes the login, but after connection, no data is transferred - the incoming and outgoing freeze. It is a split tunnel connection and neither network or internet traffic works. 

I tried disabling the firewall and System Integrity Protection, but neither had any effect. 

[lzs · Accepted solution]

I've been trying since the first public beta, and now on the final GM Candidate. The VPN problem is there. Basically, what is wrong is that OS X's resolver is sending traffic out through the primary (original) network interface, even though the route table correctly shows that the VPN tunnel (ppp0) should be used.

When you use a command like nslookup, the DNS traffic goes through the VPN tunnel (ppp0) properly.

DNS name resolution  fails because my VPN client is told to use my corporate DNS server, but my corporate DNS server refuses to serve name queries from outside the corporate network. When the FortiClient VPN is connected, OS X's name resolution traffic arrives at the DNS server with the client's public Internet IP address, and hence is refused by my DNS server.

Technically, this looks like an OS X bug. Or, perhaps there really is something wrong that FortiClient is dong. Either way, I hope FortiNet can rectify or take it up with Apple to fix El Capitan.

[Sridhar · Accepted solution]

Facing the same issue. Latest FortiClient(5.3*) did not fix it.

But, FortiClient 4.0.2082 did not have any such issues(though it occasionally stops tunneling on its own).

Waiting for a fix like everyone, but 4.0.2082 is letting me work for time being.

[hansbogert · Accepted solution]

I've gotten it to "work" by getting the DNS to use ppp0 and some route magic. Explanation is on: http://serverfault.com/questions/728702/how-to-get-forticlient-working-in-osx-el-capitan/728707#7287...

Let's hope either party fixes this, because running scripts after establishing VPN is quite cumbersome.

[Chris_Lin_FTNT · Accepted solution]

There is a new private build here:

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.493_macosx.dmg

Would you guys give it a try?

[kevinboos · Accepted solution]

Chris.Lin wrote:

There is a new private build here:

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.493_macosx.dmg

Would you guys give it a try?

It works for now! Thanks!

[tommy765 · Accepted solution]

Just ran El Capitan updates and it still does not work - bummer

[shenight · Accepted solution]

Chris.Lin wrote:

Here is another interim build b499.

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.499_macosx.dmg

5.4.1 release may be available at the end of February.

P.S. b493 from previous post is different from the official 5.4.0 b493. Developer made the change after 5.4.0 was released.

Thanks ! I had same problems that other people since 3 months with forticlient and this new build fixes the issue!!! Great job!

[Chris_Lin_FTNT · Accepted solution]

Try this. A more recent build.

https://www.dropbox.com/s...bpx1VjzYAmiK00S9a?dl=0

[zone11]

works for me too, tested on five different 10.11.1 setups

[Sridhar]

Since it works for a lot of people, leaving the panic trace here. The crash happens after like an hour, not immediately.

Anonymous UUID: E140DDC2-C2B4-3072-FB84-FD286608ECDB

Sat Oct 24 09:04:49 2015

*** Panic Report ***
panic(cpu 2 caller 0xffffff80083d6bba): Kernel trap at 0xffffff800864cfec, type 13=general protection, registers:
CR0: 0x000000008001003b, CR2: 0x00002e12d40b6000, CR3: 0x000000000ba79000, CR4: 0x00000000001627e0
RAX: 0xdeadbeefdeadbeef, RBX: 0xffffff802c6b03b0, RCX: 0xfffffffde33ffb90, RDX: 0x0000000000000001
RSP: 0xffffff81f4283900, RBP: 0xffffff81f4283980, RSI: 0x0000000000000002, RDI: 0xffffff8027f27f80
R8: 0xffffff8027f25000, R9: 0xffffff80348437e0, R10: 0x0000000000000238, R11: 0xffffff81ea022fbc
R12: 0xffffff80348431c0, R13: 0x0000000000000001, R14: 0xffffff80348437e0, R15: 0xffffff802c6b07e8
RFL: 0x0000000000010286, RIP: 0xffffff800864cfec, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0x00002e12d40b6000, Error code: 0x0000000000000000, Fault CPU: 0x2, PL: 0

Backtrace (CPU 2), Frame : Return Address
0xffffff81c85d5df0 : 0xffffff80082e5307 
0xffffff81c85d5e70 : 0xffffff80083d6bba 
0xffffff81c85d6050 : 0xffffff80083f4313 
0xffffff81c85d6070 : 0xffffff800864cfec 
0xffffff81f4283980 : 0xffffff8008649d38 
0xffffff81f4283d90 : 0xffffff8008636717 
0xffffff81f4283de0 : 0xffffff8008637c53 
0xffffff81f4283f40 : 0xffffff800856d8cc 
0xffffff81f4283fb0 : 0xffffff80083d15d7

BSD process name corresponding to current thread: kernel_task
Boot args: kext-dev-mode=1

Mac OS version:
15B42

Kernel version:
Darwin Kernel Version 15.0.0: Sat Sep 19 15:53:46 PDT 2015; root:xnu-3247.10.11~1/RELEASE_X86_64
Kernel UUID: AB5FC1B4-12E7-311E-8E6F-9023985D8C1D
Kernel slide: 0x0000000008000000
Kernel text base: 0xffffff8008200000
__HIB text base: 0xffffff8008100000
System model name: MacBookPro11,3 (Mac-2BD1B31983FE1663)

System uptime in nanoseconds: 38938429607333
last loaded kext at 26705545663222: com.fortinet.fct.kext.fctapnke 1 (addr 0xffffff7f8b357000, size 401408)
last unloaded kext at 26374457083433: com.apple.driver.AppleUSBTCKeyEventDriver 245.4 (addr 0xffffff7f8b357000, size 8192)
loaded kexts:
com.fortinet.fct.kext.fctapnke 1
org.virtualbox.kext.VBoxNetAdp 5.0.4
org.virtualbox.kext.VBoxNetFlt 5.0.4
org.virtualbox.kext.VBoxUSB 5.0.4
org.virtualbox.kext.VBoxDrv 5.0.4
com.kaspersky.kext.klif 3.0.2a239
com.apple.filesystems.smbfs 3.0.0
com.apple.driver.AppleMikeyHIDDriver 124
com.apple.driver.AppleHWSensor 1.9.5d0
com.apple.filesystems.autofs 3.0
com.apple.driver.AudioAUUC 1.70
com.apple.driver.ApplePlatformEnabler 2.5.1d0
com.apple.driver.AGPM 110.20.21
com.apple.driver.X86PlatformShim 1.0.0
com.apple.driver.AppleOSXWatchdog 1
com.apple.driver.AppleGraphicsDevicePolicy 3.7.7
com.apple.driver.AppleHDA 272.50.31
com.apple.driver.AppleUpstreamUserClient 3.6.1
com.apple.driver.pmtelemetry 1
com.apple.iokit.IOUserEthernet 1.0.1
com.apple.GeForce 10.0.6
com.apple.iokit.IOBluetoothSerialManager 4.4.2f1
com.apple.driver.AppleIntelHD5000Graphics 10.1.0
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AppleHV 1
com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.4.2f1
com.apple.driver.AppleThunderboltIP 3.0.8
com.apple.driver.AppleLPC 3.1
com.apple.driver.AppleSMCLMU 208
com.apple.driver.AppleIntelFramebufferAzul 10.1.0
com.apple.driver.AppleCameraInterface 5.41.0
com.apple.driver.AppleMuxControl 3.11.33b1
com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0
com.apple.driver.AppleMCCSControl 1.2.13
com.apple.driver.AppleUSBTCButtons 245.4
com.apple.driver.AppleUSBCardReader 3.7.1
com.apple.driver.AppleUSBTCKeyboard 245.4
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0
com.apple.BootCache 37
com.apple.iokit.IOAHCIBlockStorage 2.8.0
com.apple.driver.AppleAHCIPort 3.1.5
com.apple.driver.AirPort.Brcm4360 1010.14.1a4
com.apple.driver.AppleSmartBatteryManager 161.0.0
com.apple.driver.AppleACPIButtons 4.0
com.apple.driver.AppleRTC 2.0
com.apple.driver.AppleHPET 1.8
com.apple.driver.AppleSMBIOS 2.1
com.apple.driver.AppleACPIEC 4.0
com.apple.driver.AppleAPIC 1.7
com.apple.nke.applicationfirewall 163
com.apple.security.quarantine 3
com.apple.security.TMSafetyNet 8
com.apple.nke.ppp 1.9
com.apple.iokit.IOUSBUserClient 900.4.1
com.apple.kext.triggers 1.0
com.apple.driver.DspFuncLib 272.50.31
com.apple.kext.OSvKernDSPLib 525
com.apple.nvidia.driver.NVDAGK100Hal 10.0.6
com.apple.nvidia.driver.NVDAResman 10.0.6
com.apple.iokit.IOSerialFamily 11
com.apple.iokit.IOSurface 108.0.1
com.apple.driver.CoreCaptureResponder 1
com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.4.2f1
com.apple.iokit.IOBluetoothFamily 4.4.2f1
com.apple.driver.AppleHDAController 272.50.31
com.apple.iokit.IOHDAFamily 272.50.31
com.apple.iokit.IOAudioFamily 204.1
com.apple.vecLib.kext 1.2.0
com.apple.AppleGraphicsDeviceControl 3.11.33b1
com.apple.iokit.IOAcceleratorFamily2 203.10
com.apple.driver.AppleBacklightExpert 1.1.0
com.apple.iokit.IONDRVSupport 2.4.1
com.apple.driver.AppleGraphicsControl 3.11.33b1
com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0
com.apple.driver.X86PlatformPlugin 1.0.0
com.apple.driver.IOPlatformPluginFamily 6.0.0d7
com.apple.driver.AppleSMC 3.1.9
com.apple.driver.AppleSMBusController 1.0.14d1
com.apple.iokit.IOGraphicsFamily 2.4.1
com.apple.iokit.IOSCSIBlockCommandsDevice 3.7.7
com.apple.iokit.IOUSBMassStorageDriver 1.0.0
com.apple.iokit.IOSCSIArchitectureModelFamily 3.7.7
com.apple.driver.AppleUSBMultitouch 250.4
com.apple.iokit.IOUSBHIDDriver 900.4.1
com.apple.driver.usb.AppleUSBHostCompositeDevice 1.0.1
com.apple.driver.usb.AppleUSBHub 1.0.1
com.apple.driver.CoreStorage 517
com.apple.iokit.IOAHCIFamily 2.8.0
com.apple.driver.AppleThunderboltDPInAdapter 4.1.2
com.apple.driver.AppleThunderboltDPAdapterFamily 4.1.2
com.apple.driver.AppleThunderboltPCIDownAdapter 2.0.2
com.apple.driver.AppleThunderboltNHI 4.0.4
com.apple.iokit.IOThunderboltFamily 5.0.6
com.apple.iokit.IO80211Family 1101.24
com.apple.driver.mDNSOffloadUserClient 1.0.1b8
com.apple.iokit.IONetworkingFamily 3.2
com.apple.driver.corecapture 1.0.4
com.apple.driver.usb.AppleUSBXHCIPCI 1.0.1
com.apple.driver.usb.AppleUSBXHCI 1.0.1
com.apple.iokit.IOUSBFamily 900.4.1
com.apple.iokit.IOUSBHostFamily 1.0.1
com.apple.driver.AppleUSBHostMergeProperties 1.0.1
com.apple.driver.AppleEFINVRAM 2.0
com.apple.driver.AppleEFIRuntime 2.0
com.apple.iokit.IOHIDFamily 2.0.0
com.apple.iokit.IOSMBusFamily 1.1
com.apple.security.sandbox 300.0
com.apple.kext.AppleMatch 1.0.0d1
com.apple.driver.AppleKeyStore 2
com.apple.driver.AppleMobileFileIntegrity 1.0.5
com.apple.driver.AppleCredentialManager 1.0
com.apple.driver.DiskImages 415
com.apple.iokit.IOStorageFamily 2.1
com.apple.iokit.IOReportFamily 31
com.apple.driver.AppleFDEKeyStore 28.30
com.apple.driver.AppleACPIPlatform 4.0
com.apple.iokit.IOPCIFamily 2.9
com.apple.iokit.IOACPIFamily 1.4
com.apple.kec.Libm 1
com.apple.kec.pthread 1
com.apple.kec.corecrypto 1.0
Model: MacBookPro11,3, BootROM MBP112.0138.B16, 4 processors, Intel Core i7, 2.3 GHz, 16 GB, SMC 2.19f12
Graphics: Intel Iris Pro, Intel Iris Pro, Built-In
Graphics: NVIDIA GeForce GT 750M, NVIDIA GeForce GT 750M, PCIe, 2048 MB
Memory Module: BANK 0/DIMM0, 8 GB, DDR3, 1600 MHz, 0x02FE, -
Memory Module: BANK 1/DIMM0, 8 GB, DDR3, 1600 MHz, 0x02FE, -
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x134), Broadcom BCM43xx 1.0 (7.21.94.29.1a4)
Bluetooth: Version 4.4.2f1 16391, 3 services, 19 devices, 1 incoming serial ports
Network Service: Wi-Fi, AirPort, en0
Serial ATA Device: APPLE SSD SM0512F, 500.28 GB
USB Device: USB 3.0 Bus
USB Device: Apple Internal Keyboard / Trackpad
USB Device: BRCM20702 Hub
USB Device: Bluetooth USB Host Controller
Thunderbolt Bus: MacBook Pro, Apple Inc., 17.1

[lubyou]

Sridhar wrote:

Since it works for a lot of people, leaving the panic trace here. The crash happens after like an hour, not immediately.

Anonymous UUID: E140DDC2-C2B4-3072-FB84-FD286608ECDB

Sat Oct 24 09:04:49 2015

*** Panic Report ***
panic(cpu 2 caller 0xffffff80083d6bba): Kernel trap at 0xffffff800864cfec, type 13=general protection, registers:
CR0: 0x000000008001003b, CR2: 0x00002e12d40b6000, CR3: 0x000000000ba79000, CR4: 0x00000000001627e0
RAX: 0xdeadbeefdeadbeef, RBX: 0xffffff802c6b03b0, RCX: 0xfffffffde33ffb90, RDX: 0x0000000000000001
RSP: 0xffffff81f4283900, RBP: 0xffffff81f4283980, RSI: 0x0000000000000002, RDI: 0xffffff8027f27f80
R8: 0xffffff8027f25000, R9: 0xffffff80348437e0, R10: 0x0000000000000238, R11: 0xffffff81ea022fbc
R12: 0xffffff80348431c0, R13: 0x0000000000000001, R14: 0xffffff80348437e0, R15: 0xffffff802c6b07e8
RFL: 0x0000000000010286, RIP: 0xffffff800864cfec, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0x00002e12d40b6000, Error code: 0x0000000000000000, Fault CPU: 0x2, PL: 0

Backtrace (CPU 2), Frame : Return Address
0xffffff81c85d5df0 : 0xffffff80082e5307 
0xffffff81c85d5e70 : 0xffffff80083d6bba 
0xffffff81c85d6050 : 0xffffff80083f4313 
0xffffff81c85d6070 : 0xffffff800864cfec 
0xffffff81f4283980 : 0xffffff8008649d38 
0xffffff81f4283d90 : 0xffffff8008636717 
0xffffff81f4283de0 : 0xffffff8008637c53 
0xffffff81f4283f40 : 0xffffff800856d8cc 
0xffffff81f4283fb0 : 0xffffff80083d15d7

BSD process name corresponding to current thread: kernel_task
Boot args: kext-dev-mode=1

Mac OS version:
15B42

Kernel version:
Darwin Kernel Version 15.0.0: Sat Sep 19 15:53:46 PDT 2015; root:xnu-3247.10.11~1/RELEASE_X86_64
Kernel UUID: AB5FC1B4-12E7-311E-8E6F-9023985D8C1D
Kernel slide: 0x0000000008000000
Kernel text base: 0xffffff8008200000
__HIB text base: 0xffffff8008100000
System model name: MacBookPro11,3 (Mac-2BD1B31983FE1663)

System uptime in nanoseconds: 38938429607333
last loaded kext at 26705545663222: com.fortinet.fct.kext.fctapnke 1 (addr 0xffffff7f8b357000, size 401408)
last unloaded kext at 26374457083433: com.apple.driver.AppleUSBTCKeyEventDriver 245.4 (addr 0xffffff7f8b357000, size 8192)
loaded kexts:
com.fortinet.fct.kext.fctapnke 1
org.virtualbox.kext.VBoxNetAdp 5.0.4
org.virtualbox.kext.VBoxNetFlt 5.0.4
org.virtualbox.kext.VBoxUSB 5.0.4
org.virtualbox.kext.VBoxDrv 5.0.4
com.kaspersky.kext.klif 3.0.2a239
com.apple.filesystems.smbfs 3.0.0
com.apple.driver.AppleMikeyHIDDriver 124
com.apple.driver.AppleHWSensor 1.9.5d0
com.apple.filesystems.autofs 3.0
com.apple.driver.AudioAUUC 1.70
com.apple.driver.ApplePlatformEnabler 2.5.1d0
com.apple.driver.AGPM 110.20.21
com.apple.driver.X86PlatformShim 1.0.0
com.apple.driver.AppleOSXWatchdog 1
com.apple.driver.AppleGraphicsDevicePolicy 3.7.7
com.apple.driver.AppleHDA 272.50.31
com.apple.driver.AppleUpstreamUserClient 3.6.1
com.apple.driver.pmtelemetry 1
com.apple.iokit.IOUserEthernet 1.0.1
com.apple.GeForce 10.0.6
com.apple.iokit.IOBluetoothSerialManager 4.4.2f1
com.apple.driver.AppleIntelHD5000Graphics 10.1.0
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AppleHV 1
com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.4.2f1
com.apple.driver.AppleThunderboltIP 3.0.8
com.apple.driver.AppleLPC 3.1
com.apple.driver.AppleSMCLMU 208
com.apple.driver.AppleIntelFramebufferAzul 10.1.0
com.apple.driver.AppleCameraInterface 5.41.0
com.apple.driver.AppleMuxControl 3.11.33b1
com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0
com.apple.driver.AppleMCCSControl 1.2.13
com.apple.driver.AppleUSBTCButtons 245.4
com.apple.driver.AppleUSBCardReader 3.7.1
com.apple.driver.AppleUSBTCKeyboard 245.4
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0
com.apple.BootCache 37
com.apple.iokit.IOAHCIBlockStorage 2.8.0
com.apple.driver.AppleAHCIPort 3.1.5
com.apple.driver.AirPort.Brcm4360 1010.14.1a4
com.apple.driver.AppleSmartBatteryManager 161.0.0
com.apple.driver.AppleACPIButtons 4.0
com.apple.driver.AppleRTC 2.0
com.apple.driver.AppleHPET 1.8
com.apple.driver.AppleSMBIOS 2.1
com.apple.driver.AppleACPIEC 4.0
com.apple.driver.AppleAPIC 1.7
com.apple.nke.applicationfirewall 163
com.apple.security.quarantine 3
com.apple.security.TMSafetyNet 8
com.apple.nke.ppp 1.9
com.apple.iokit.IOUSBUserClient 900.4.1
com.apple.kext.triggers 1.0
com.apple.driver.DspFuncLib 272.50.31
com.apple.kext.OSvKernDSPLib 525
com.apple.nvidia.driver.NVDAGK100Hal 10.0.6
com.apple.nvidia.driver.NVDAResman 10.0.6
com.apple.iokit.IOSerialFamily 11
com.apple.iokit.IOSurface 108.0.1
com.apple.driver.CoreCaptureResponder 1
com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.4.2f1
com.apple.iokit.IOBluetoothFamily 4.4.2f1
com.apple.driver.AppleHDAController 272.50.31
com.apple.iokit.IOHDAFamily 272.50.31
com.apple.iokit.IOAudioFamily 204.1
com.apple.vecLib.kext 1.2.0
com.apple.AppleGraphicsDeviceControl 3.11.33b1
com.apple.iokit.IOAcceleratorFamily2 203.10
com.apple.driver.AppleBacklightExpert 1.1.0
com.apple.iokit.IONDRVSupport 2.4.1
com.apple.driver.AppleGraphicsControl 3.11.33b1
com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0
com.apple.driver.X86PlatformPlugin 1.0.0
com.apple.driver.IOPlatformPluginFamily 6.0.0d7
com.apple.driver.AppleSMC 3.1.9
com.apple.driver.AppleSMBusController 1.0.14d1
com.apple.iokit.IOGraphicsFamily 2.4.1
com.apple.iokit.IOSCSIBlockCommandsDevice 3.7.7
com.apple.iokit.IOUSBMassStorageDriver 1.0.0
com.apple.iokit.IOSCSIArchitectureModelFamily 3.7.7
com.apple.driver.AppleUSBMultitouch 250.4
com.apple.iokit.IOUSBHIDDriver 900.4.1
com.apple.driver.usb.AppleUSBHostCompositeDevice 1.0.1
com.apple.driver.usb.AppleUSBHub 1.0.1
com.apple.driver.CoreStorage 517
com.apple.iokit.IOAHCIFamily 2.8.0
com.apple.driver.AppleThunderboltDPInAdapter 4.1.2
com.apple.driver.AppleThunderboltDPAdapterFamily 4.1.2
com.apple.driver.AppleThunderboltPCIDownAdapter 2.0.2
com.apple.driver.AppleThunderboltNHI 4.0.4
com.apple.iokit.IOThunderboltFamily 5.0.6
com.apple.iokit.IO80211Family 1101.24
com.apple.driver.mDNSOffloadUserClient 1.0.1b8
com.apple.iokit.IONetworkingFamily 3.2
com.apple.driver.corecapture 1.0.4
com.apple.driver.usb.AppleUSBXHCIPCI 1.0.1
com.apple.driver.usb.AppleUSBXHCI 1.0.1
com.apple.iokit.IOUSBFamily 900.4.1
com.apple.iokit.IOUSBHostFamily 1.0.1
com.apple.driver.AppleUSBHostMergeProperties 1.0.1
com.apple.driver.AppleEFINVRAM 2.0
com.apple.driver.AppleEFIRuntime 2.0
com.apple.iokit.IOHIDFamily 2.0.0
com.apple.iokit.IOSMBusFamily 1.1
com.apple.security.sandbox 300.0
com.apple.kext.AppleMatch 1.0.0d1
com.apple.driver.AppleKeyStore 2
com.apple.driver.AppleMobileFileIntegrity 1.0.5
com.apple.driver.AppleCredentialManager 1.0
com.apple.driver.DiskImages 415
com.apple.iokit.IOStorageFamily 2.1
com.apple.iokit.IOReportFamily 31
com.apple.driver.AppleFDEKeyStore 28.30
com.apple.driver.AppleACPIPlatform 4.0
com.apple.iokit.IOPCIFamily 2.9
com.apple.iokit.IOACPIFamily 1.4
com.apple.kec.Libm 1
com.apple.kec.pthread 1
com.apple.kec.corecrypto 1.0
Model: MacBookPro11,3, BootROM MBP112.0138.B16, 4 processors, Intel Core i7, 2.3 GHz, 16 GB, SMC 2.19f12
Graphics: Intel Iris Pro, Intel Iris Pro, Built-In
Graphics: NVIDIA GeForce GT 750M, NVIDIA GeForce GT 750M, PCIe, 2048 MB
Memory Module: BANK 0/DIMM0, 8 GB, DDR3, 1600 MHz, 0x02FE, -
Memory Module: BANK 1/DIMM0, 8 GB, DDR3, 1600 MHz, 0x02FE, -
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x134), Broadcom BCM43xx 1.0 (7.21.94.29.1a4)
Bluetooth: Version 4.4.2f1 16391, 3 services, 19 devices, 1 incoming serial ports
Network Service: Wi-Fi, AirPort, en0
Serial ATA Device: APPLE SSD SM0512F, 500.28 GB
USB Device: USB 3.0 Bus
USB Device: Apple Internal Keyboard / Trackpad
USB Device: BRCM20702 Hub
USB Device: Bluetooth USB Host Controller
Thunderbolt Bus: MacBook Pro, Apple Inc., 17.1

I don't have any crashes, but if I were you I would unload the kaspersky kext (and possibly the virtualbox kexts), to see if that makes a difference.

I had kernel panics with both products before (although not in relation to forticlient), and it's a shot in the dark, but possibly worth investigating.

[EOC]

With the Private Build SSL VPN Seems to be working now. But for IPSec VPN DNS ist still not working.

[seadave]

SSL  VPN works on both of these but it is terribly slow.  Less than 3Mbps throughput over a 50Mbps home connection terminating on our 100Mbps fiber connection at the office.

So I had a Mac running 10.10.2, I installed the private build 5.4.0.493 of FortiClient.  As the advanced settings are not available, I had to extract the FC config and import my settings from a Windows build.  This allowed me to connect to IPSec, but DNS does not work.

I have another Mac that I did a completely clean install on.  It is running 10.11.1.  I installed the 5.4.0.493 build with mixed results.  FQDN hosts resolve, but hostnames only do not.  I assume this is because the SSLVPN connection uses the DNS Search options that you are able to assign on the Mac interfaces?  I'm not using DHCP to assign IPSec IPs.  Maybe that is the problem.  FN really needs to make this consistent between WinOS and MacOS.  If there are DNS related settings in the VPN XML config we can add, that would be great to know.  It would be even BETTER if we had options in the Mac FC GUI to input these values.  Would save everyone here LOTS of time and effort.

[Frankenheimer]

Hi,

the private build also works for me so far.

Rgds.

Franz

[htoomik]

Chris.Lin wrote:

There is a new private build here:

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.493_macosx.dmg

Would you guys give it a try?

Thank you Chris! This fixes the issue for me as well (on 10.11.1). So nice to be able to work normally again!

[tiujpatel]

I am still getting this error hundreds of times, which is locking up everything on this build as well. 

kernel[0]: fctappfwnke : error! - pkt header write error

[amf]

tiujpatel wrote:

I am still getting this error hundreds of times, which is locking up everything on this build as well. 

kernel[0]: fctappfwnke : error! - pkt header write error

Seeing this, too. Also marked increase in grey screen of death occurrences, which seems pretty well tied into the El Cap update.

[petertavenier]

For me the SSLVPN via FortiClient does not work on 5.2.3.370 and also not on 5.4.0.493 (downloaded it form the support.fortinet.net portal) I'm running OS X El Capitan 10.11.1 (15B42), before upgrading to El Capitan it worked just fine. The OS X build in Cisco IPSEC client works fine to the same FortiGate. I need our internal DNS server (announced via de VPN) to reach internal servers. The

scutil --dns

shows some difference, and I think that is the problem. At the bottom of the output in the part 'DNS configuration (for scoped queries)' a connection via IPSEC shows 2 resolvers and the the SSLVPN only shows the default resolver. The SSLVPN is missing:

resolver #2
  search domain[0] : <internal-domain>
  nameserver[0] : 172.x.x.x
  nameserver[1] : 172.x.x.x
  if_index : 11 (utun0)
  flags    : Scoped, Request A records
Reachable, Transient Connection

The interesting part is that the IPSEC VPN keeps the /etc/resolv.conf file untouched. and the SSLVPN (which is not working) changes the /etc/resolv.conf file the the DNS settings pushed via the VPN.