FortiClient VPN Problems With OSX 10.11 El Capitan

[danjahner]

I installed the GM candidate of Mac OS X 10.11 El Capitan and my FortiClient VPN has stopped working. It completes the login, but after connection, no data is transferred - the incoming and outgoing freeze. It is a split tunnel connection and neither network or internet traffic works. 

I tried disabling the firewall and System Integrity Protection, but neither had any effect. 

[lzs · Accepted solution]

I've been trying since the first public beta, and now on the final GM Candidate. The VPN problem is there. Basically, what is wrong is that OS X's resolver is sending traffic out through the primary (original) network interface, even though the route table correctly shows that the VPN tunnel (ppp0) should be used.

When you use a command like nslookup, the DNS traffic goes through the VPN tunnel (ppp0) properly.

DNS name resolution  fails because my VPN client is told to use my corporate DNS server, but my corporate DNS server refuses to serve name queries from outside the corporate network. When the FortiClient VPN is connected, OS X's name resolution traffic arrives at the DNS server with the client's public Internet IP address, and hence is refused by my DNS server.

Technically, this looks like an OS X bug. Or, perhaps there really is something wrong that FortiClient is dong. Either way, I hope FortiNet can rectify or take it up with Apple to fix El Capitan.

[Sridhar · Accepted solution]

Facing the same issue. Latest FortiClient(5.3*) did not fix it.

But, FortiClient 4.0.2082 did not have any such issues(though it occasionally stops tunneling on its own).

Waiting for a fix like everyone, but 4.0.2082 is letting me work for time being.

[hansbogert · Accepted solution]

I've gotten it to "work" by getting the DNS to use ppp0 and some route magic. Explanation is on: http://serverfault.com/questions/728702/how-to-get-forticlient-working-in-osx-el-capitan/728707#7287...

Let's hope either party fixes this, because running scripts after establishing VPN is quite cumbersome.

[Chris_Lin_FTNT · Accepted solution]

There is a new private build here:

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.493_macosx.dmg

Would you guys give it a try?

[kevinboos · Accepted solution]

Chris.Lin wrote:

There is a new private build here:

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.493_macosx.dmg

Would you guys give it a try?

It works for now! Thanks!

[tommy765 · Accepted solution]

Just ran El Capitan updates and it still does not work - bummer

[shenight · Accepted solution]

Chris.Lin wrote:

Here is another interim build b499.

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.499_macosx.dmg

5.4.1 release may be available at the end of February.

P.S. b493 from previous post is different from the official 5.4.0 b493. Developer made the change after 5.4.0 was released.

Thanks ! I had same problems that other people since 3 months with forticlient and this new build fixes the issue!!! Great job!

[Chris_Lin_FTNT · Accepted solution]

Try this. A more recent build.

https://www.dropbox.com/s...bpx1VjzYAmiK00S9a?dl=0

[tommy765]

The interim build that Chris.Lin linked to worked for me - thanks

[brucereed]

Chris.Lin wrote:

Here is another interim build b499.

https://dl.dropboxusercontent.com/u/58793690/mac/FortiClient_5.4.0.499_macosx.dmg

5.4.1 release may be available at the end of February.

P.S. b493 from previous post is different from the official 5.4.0 b493. Developer made the change after 5.4.0 was released.

Thanks, we'll test with this! We can easily reproduce the problem on El Cap, so we'll cross our fingers.

[brucereed]

Build 499 does not work for us. Same problem with kernel panics.

[Sartuche24]

This is very strange as I run El Capitan with the latest updates and I'm running 5.4 build 499 that was offered up here and don't experience any Kernel Panics. I have issues with Cisco AnyConnect causing problems but thats it. Very odd and can be very frustrating.

[Chris_Lin_FTNT]

@brucereed, please post more information about your kernel panic if you have.

@Sartuche24, do you mean FortiClient is conflicting with Cisco AnyConnect? If without AnyConnect it works OK?

[Sartuche24]

Just saying that FortiClient has been more stable on my MAC than Cisco AnyConnect. FortiClient works but I'm experiencing an issue with FortiClient and multiple DNS Suffixes not working. I do have a ticket open on that issue.

[brucereed]

Did you see any issues with FortiClient and El Capitan prior to the 499 build? 

We don't know for certain it is FortiClient, however, the crashes occur with FortiClient loaded and then goes away when it is removed. The FortiClient kext is the last to be loaded. Certainly it could be something else, but as I said, our El Capitan users never saw this prior to installing and using FortiClient. Crashdump is below.

Anonymous UUID: 4F76DA39-4C3D-2012-7285-2849F2115258

Wed Jan 27 14:45:37 2016

*** Panic Report ***
panic(cpu 1 caller 0xffffff80057d255a): Kernel trap at 0xffffff8005a4a0ec, type 13=general protection, registers:
CR0: 0x000000008001003b, CR2: 0x000000010ebbd000, CR3: 0x00000000088d7000, CR4: 0x00000000001627e0
RAX: 0xdeadbeefdeadbeef, RBX: 0xffffff8018bb7568, RCX: 0xffffffff9c879952, RDX: 0x0000000000000001
RSP: 0xffffff811040b8f0, RBP: 0xffffff811040b970, RSI: 0x0000000000000002, RDI: 0xffffff80173aa900
R8: 0xffffff80173a8000, R9: 0xffffff802a8afa40, R10: 0x00000000000001f8, R11: 0x00000e7ea69b2c44
R12: 0xffffff802a8af420, R13: 0x0000000000000001, R14: 0xffffff802a8afa40, R15: 0xffffff8018bb7220
RFL: 0x0000000000010282, RIP: 0xffffff8005a4a0ec, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0x000000010ebbd000, Error code: 0x0000000000000000, Fault CPU: 0x1, PL: 0

Backtrace (CPU 1), Frame : Return Address
0xffffff8107b65df0 : 0xffffff80056df792 
0xffffff8107b65e70 : 0xffffff80057d255a 
0xffffff8107b66050 : 0xffffff80057f0233 
0xffffff8107b66070 : 0xffffff8005a4a0ec 
0xffffff811040b970 : 0xffffff8005a46d26 
0xffffff811040bd90 : 0xffffff8005a334f7 
0xffffff811040bde0 : 0xffffff8005a34a33 
0xffffff811040bf40 : 0xffffff8005969f5c 
0xffffff811040bfb0 : 0xffffff80057ccf77

BSD process name corresponding to current thread: kernel_task

Mac OS version:
15D21

Kernel version:
Darwin Kernel Version 15.3.0: Thu Dec 10 18:40:58 PST 2015; root:xnu-3248.30.4~1/RELEASE_X86_64
Kernel UUID: DECC9F02-27D7-31F0-9599-A9EF2873902C
Kernel slide: 0x0000000005400000
Kernel text base: 0xffffff8005600000
__HIB text base: 0xffffff8005500000
System model name: MacBookPro11,1 (Mac-189A3D4F975D5FFC)

System uptime in nanoseconds: 15937123910283
last loaded kext at 25784564571: com.fortinet.fct.kext.fctapnke
1 (addr 0xffffff7f88203000, size 401408)
loaded kexts:
com.fortinet.fct.kext.fctapnke
1
com.fortinet.fct.kext.avkern
1.0.1
com.apple.filesystems.autofs
3.0
com.apple.driver.AudioAUUC
1.70
com.apple.driver.AGPM
110.20.22
com.apple.driver.ApplePlatformEnabler
2.6.0d0
com.apple.driver.X86PlatformShim
1.0.0
com.apple.driver.AppleHDAHardwareConfigDriver
272.51.3
com.apple.driver.AppleGraphicsDevicePolicy
3.7.7
com.apple.driver.AppleUpstreamUserClient
3.6.1
com.apple.driver.AppleHDA
272.51.3
com.apple.driver.AppleOSXWatchdog
1
com.apple.driver.AppleThunderboltIP
3.0.8
com.apple.driver.pmtelemetry
1
com.apple.iokit.IOUserEthernet
1.0.1
com.apple.iokit.IOBluetoothSerialManager
4.4.3f4
com.apple.Dont_Steal_Mac_OS_X
7.0.0
com.apple.driver.AppleLPC
3.1
com.apple.driver.AppleIntelHD5000Graphics
10.1.2
com.apple.driver.ACPI_SMC_PlatformPlugin
1.0.0
com.apple.driver.AppleHV
1
com.apple.driver.AppleIntelSlowAdaptiveClocking
4.0.0
com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport
4.4.3f4
com.apple.driver.AppleIntelFramebufferAzul
10.1.2
com.apple.driver.AppleSMCLMU
208
com.apple.driver.AppleCameraInterface
5.41.0
com.apple.driver.AppleFIVRDriver
4.1.0
com.apple.driver.AppleMuxControl
3.12.6
com.apple.driver.AppleBacklight
170.8.8
com.apple.driver.AppleMCCSControl
1.2.13
com.apple.iokit.SCSITaskUserClient
3.7.7
com.apple.iokit.IOBluetoothUSBDFU
4.4.3f4
com.apple.driver.AppleUSBStorageCoexistentDriver
3.7.1
com.apple.driver.AppleUSBCardReader
3.7.1
com.apple.driver.AppleUSBTCButtons
245.4
com.apple.driver.AppleUSBTCKeyEventDriver
245.4
com.apple.driver.AppleUSBTCKeyboard
245.4
com.apple.driver.CoreStorageFsck
517.20.1
com.apple.driver.AppleFileSystemDriver
3.0.1
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless
1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib
1.0.0
com.apple.BootCache
38
com.apple.iokit.IOAHCIBlockStorage
2.8.5
com.apple.driver.AppleAHCIPort
3.1.8
com.apple.driver.AirPort.Brcm4360
1020.17.1a1
com.apple.driver.AppleRTC
2.0
com.apple.driver.AppleSmartBatteryManager
161.0.0
com.apple.driver.AppleACPIButtons
4.0
com.apple.driver.AppleHPET
1.8
com.apple.driver.AppleSMBIOS
2.1
com.apple.driver.AppleACPIEC
4.0
com.apple.driver.AppleAPIC
1.7
com.apple.nke.applicationfirewall
163
com.apple.security.quarantine
3
com.apple.security.TMSafetyNet
8
com.apple.kext.triggers
1.0
com.apple.driver.DspFuncLib
272.51.3
com.apple.kext.OSvKernDSPLib
525
com.apple.iokit.IOSurface
108.0.1
com.apple.driver.IOPlatformPluginLegacy
1.0.0
com.apple.driver.AppleSMBusPCI
1.0.14d1
com.apple.driver.CoreCaptureResponder
1
com.apple.iokit.IOSlowAdaptiveClockingFamily
1.0.0
com.apple.iokit.IOBluetoothHostControllerUSBTransport
4.4.3f4
com.apple.iokit.IOBluetoothFamily
4.4.3f4
com.apple.driver.AppleThunderboltEDMSink
4.1.1
com.apple.driver.AppleThunderboltDPOutAdapter
4.1.3
com.apple.driver.AppleHDAController
272.51.3
com.apple.iokit.IOHDAFamily
272.51.3
com.apple.iokit.IOAudioFamily
204.3
com.apple.vecLib.kext
1.2.0
com.apple.AppleGraphicsDeviceControl
3.12.6
com.apple.iokit.IOAcceleratorFamily2
205.1
com.apple.driver.X86PlatformPlugin
1.0.0
com.apple.driver.IOPlatformPluginFamily
6.0.0d7
com.apple.driver.AppleIntelLpssUART
2.0.59
com.apple.iokit.IOSerialFamily
11
com.apple.driver.AppleGraphicsControl
3.12.6
com.apple.driver.AppleBacklightExpert
1.1.0
com.apple.iokit.IONDRVSupport
2.4.1
com.apple.driver.AppleSMC
3.1.9
com.apple.driver.AppleSMBusController
1.0.14d1
com.apple.iokit.IOGraphicsFamily
2.4.1
com.apple.iokit.IOUSBMassStorageClass
4.0.2
com.apple.iokit.IOSCSIBlockCommandsDevice
3.7.7
com.apple.iokit.IOUSBMassStorageDriver
1.0.0
com.apple.iokit.IOSCSIArchitectureModelFamily
3.7.7
com.apple.driver.usb.AppleUSBHub
1.0.1
com.apple.driver.AppleUSBMultitouch
250.5
com.apple.iokit.IOUSBHIDDriver
900.4.1
com.apple.driver.usb.IOUSBHostHIDDevice
1.0.1
com.apple.driver.usb.AppleUSBHostCompositeDevice
1.0.1
com.apple.driver.CoreStorage
517.20.1
com.apple.driver.AppleUSBMergeNub
900.4.1
com.apple.driver.AppleXsanScheme
3
com.apple.iokit.IOAHCIFamily
2.8.1
com.apple.driver.AppleThunderboltDPInAdapter
4.1.3
com.apple.driver.AppleThunderboltDPAdapterFamily
4.1.3
com.apple.driver.AppleThunderboltPCIDownAdapter
2.0.2
com.apple.driver.AppleThunderboltNHI
4.0.4
com.apple.iokit.IOThunderboltFamily
5.1.0
com.apple.iokit.IO80211Family
1110.26
com.apple.driver.mDNSOffloadUserClient
1.0.1b8
com.apple.iokit.IONetworkingFamily
3.2
com.apple.driver.corecapture
1.0.4
com.apple.driver.AppleIntelLpssGspi
2.0.59
com.apple.driver.AppleIntelLpssDmac
2.0.59
com.apple.driver.AppleIntelLpssI2C
2.0.59
com.apple.driver.usb.AppleUSBXHCIPCI
1.0.1
com.apple.driver.usb.AppleUSBXHCI
1.0.1
com.apple.iokit.IOUSBFamily
900.4.1
com.apple.iokit.IOUSBHostFamily
1.0.1
com.apple.driver.AppleUSBHostMergeProperties
1.0.1
com.apple.driver.AppleEFINVRAM
2.0
com.apple.driver.AppleEFIRuntime
2.0
com.apple.iokit.IOHIDFamily
2.0.0
com.apple.iokit.IOSMBusFamily
1.1
com.apple.security.sandbox
300.0
com.apple.kext.AppleMatch
1.0.0d1
com.apple.driver.AppleKeyStore
2
com.apple.driver.AppleMobileFileIntegrity
1.0.5
com.apple.driver.AppleCredentialManager
1.0
com.apple.driver.DiskImages
417.2
com.apple.iokit.IOStorageFamily
2.1
com.apple.iokit.IOReportFamily
31
com.apple.driver.AppleFDEKeyStore
28.30
com.apple.driver.AppleACPIPlatform
4.0
com.apple.iokit.IOPCIFamily
2.9
com.apple.iokit.IOACPIFamily
1.4
com.apple.kec.Libm
1
com.apple.kec.pthread
1
com.apple.kec.corecrypto
i012-7285-2849F2115258
Wed Jan 27 14:45:37 2016
*** Panic Report ***
panic(cpu 1 caller 0xffffff80057d255a): Kernel trap at 0xffffff8005a4a0ec, type 13=general protection, registers:
CR0: 0x000000008001003b, CR2: 0x000000010ebbd000, CR3: 0x00000000088d7000, CR4: 0x00000000001627e0
RAX: 0xdeadbeefdeadbeef, RBX: 0xffffff8018bb7568, RCX: 0xffffffff9c879952, RDX: 0x0000000000000001
RSP: 0xffffff811040b8f0, RBP: 0xffffff811040b970, RSI: 0x0000000000000002, RDI: 0xffffff80173aa900
R8: 0xffffff80173a8000, R9: 0xffffff802a8afa40, R10: 0x00000000000001f8, R11: 0x00000e7ea69b2c44
R12: 0xffffff802a8af420, R13: 0x0000000000000001, R14: 0xffffff802a8afa40, R15: 0xffffff8018bb7220
RFL: 0x0000000000010282, RIP: 0xffffff8005a4a0ec, CS: 0x0000000000000008, SS: 0x0000000000000010
Fault CR2: 0x000000010ebbd000, Error code: 0x0000000000000000, Fault CPU: 0x1, PL: 0
Backtrace (CPU 1), Frame : Return Address
0xffffff8107b65df0 : 0xffffff80056df792 
0xffffff8107b65e70 : 0xffffff80057d255a 
0xffffff8107b66050 : 0xffffff80057f0233 
0xffffff8107b66070 : 0xffffff8005a4a0ec 
0xffffff811040b970 : 0xffffff8005a46d26 
0xffffff811040bd90 : 0xffffff8005a334f7 
0xffffff811040bde0 : 0xffffff8005a34a33 
0xffffff811040bf40 : 0xffffff8005969f5c 
0xffffff811040bfb0 : 0xffffff80057ccf77 
BSD process name corresponding to current thread: kernel_task
Mac OS version:
15D21
Kernel version:
Darwin Kernel Version 15.3.0: Thu Dec 10 18:40:58 PST 2015; root:xnu-3248.30.4~1/RELEASE_X86_64
Kernel UUID: DECC9F02-27D7-31F0-9599-A9EF2873902C
Kernel slide: 0x0000000005400000
Kernel text base: 0xffffff8005600000
__HIB text base: 0xffffff8005500000
System model name: MacBookPro11,1 (Mac-189A3D4F975D5FFC)
System uptime in nanoseconds: 15937123910283
last loaded kext at 25784564571: com.fortinet.fct.kext.fctapnke 1 (addr 0xffffff7f88203000, size 401408)
loaded kexts:
com.fortinet.fct.kext.fctapnke 1
com.fortinet.fct.kext.avkern 1.0.1
com.apple.filesystems.autofs 3.0
com.apple.driver.AudioAUUC 1.70
com.apple.driver.AGPM 110.20.22
com.apple.driver.ApplePlatformEnabler 2.6.0d0
com.apple.driver.X86PlatformShim 1.0.0
com.apple.driver.AppleHDAHardwareConfigDriver 272.51.3
com.apple.driver.AppleGraphicsDevicePolicy 3.7.7
com.apple.driver.AppleUpstreamUserClient 3.6.1
com.apple.driver.AppleHDA 272.51.3
com.apple.driver.AppleOSXWatchdog 1
com.apple.driver.AppleThunderboltIP 3.0.8
com.apple.driver.pmtelemetry 1
com.apple.iokit.IOUserEthernet 1.0.1
com.apple.iokit.IOBluetoothSerialManager 4.4.3f4
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AppleLPC 3.1
com.apple.driver.AppleIntelHD5000Graphics 10.1.2
com.apple.driver.ACPI_SMC_PlatformPlugin 1.0.0
com.apple.driver.AppleHV 1
com.apple.driver.AppleIntelSlowAdaptiveClocking 4.0.0
com.apple.iokit.BroadcomBluetoothHostControllerUSBTransport 4.4.3f4
com.apple.driver.AppleIntelFramebufferAzul 10.1.2
com.apple.driver.AppleSMCLMU 208
com.apple.driver.AppleCameraInterface 5.41.0
com.apple.driver.AppleFIVRDriver 4.1.0
com.apple.driver.AppleMuxControl 3.12.6
com.apple.driver.AppleBacklight 170.8.8
com.apple.driver.AppleMCCSControl 1.2.13
com.apple.iokit.SCSITaskUserClient 3.7.7
com.apple.iokit.IOBluetoothUSBDFU 4.4.3f4
com.apple.driver.AppleUSBStorageCoexistentDriver 3.7.1
com.apple.driver.AppleUSBCardReader 3.7.1
com.apple.driver.AppleUSBTCButtons 245.4
com.apple.driver.AppleUSBTCKeyEventDriver 245.4
com.apple.driver.AppleUSBTCKeyboard 245.4
com.apple.driver.CoreStorageFsck 517.20.1
com.apple.driver.AppleFileSystemDriver 3.0.1
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0
com.apple.BootCache 38
com.apple.iokit.IOAHCIBlockStorage 2.8.5
com.apple.driver.AppleAHCIPort 3.1.8
com.apple.driver.AirPort.Brcm4360 1020.17.1a1
com.apple.driver.AppleRTC 2.0
com.apple.driver.AppleSmartBatteryManager 161.0.0
com.apple.driver.AppleACPIButtons 4.0
com.apple.driver.AppleHPET 1.8
com.apple.driver.AppleSMBIOS 2.1
com.apple.driver.AppleACPIEC 4.0
com.apple.driver.AppleAPIC 1.7
com.apple.nke.applicationfirewall 163
com.apple.security.quarantine 3
com.apple.security.TMSafetyNet 8
com.apple.kext.triggers 1.0
com.apple.driver.DspFuncLib 272.51.3
com.apple.kext.OSvKernDSPLib 525
com.apple.iokit.IOSurface 108.0.1
com.apple.driver.IOPlatformPluginLegacy 1.0.0
com.apple.driver.AppleSMBusPCI 1.0.14d1
com.apple.driver.CoreCaptureResponder 1
com.apple.iokit.IOSlowAdaptiveClockingFamily 1.0.0
com.apple.iokit.IOBluetoothHostControllerUSBTransport 4.4.3f4
com.apple.iokit.IOBluetoothFamily 4.4.3f4
com.apple.driver.AppleThunderboltEDMSink 4.1.1
com.apple.driver.AppleThunderboltDPOutAdapter 4.1.3
com.apple.driver.AppleHDAController 272.51.3
com.apple.iokit.IOHDAFamily 272.51.3
com.apple.iokit.IOAudioFamily 204.3
com.apple.vecLib.kext 1.2.0
com.apple.AppleGraphicsDeviceControl 3.12.6
com.apple.iokit.IOAcceleratorFamily2 205.1
com.apple.driver.X86PlatformPlugin 1.0.0
com.apple.driver.IOPlatformPluginFamily 6.0.0d7
com.apple.driver.AppleIntelLpssUART 2.0.59
com.apple.iokit.IOSerialFamily 11
com.apple.driver.AppleGraphicsControl 3.12.6
com.apple.driver.AppleBacklightExpert 1.1.0
com.apple.iokit.IONDRVSupport 2.4.1
com.apple.driver.AppleSMC 3.1.9
com.apple.driver.AppleSMBusController 1.0.14d1
com.apple.iokit.IOGraphicsFamily 2.4.1
com.apple.iokit.IOUSBMassStorageClass 4.0.2
com.apple.iokit.IOSCSIBlockCommandsDevice 3.7.7
com.apple.iokit.IOUSBMassStorageDriver 1.0.0
com.apple.iokit.IOSCSIArchitectureModelFamily 3.7.7
com.apple.driver.usb.AppleUSBHub 1.0.1
com.apple.driver.AppleUSBMultitouch 250.5
com.apple.iokit.IOUSBHIDDriver 900.4.1
com.apple.driver.usb.IOUSBHostHIDDevice 1.0.1
com.apple.driver.usb.AppleUSBHostCompositeDevice 1.0.1
com.apple.driver.CoreStorage 517.20.1
com.apple.driver.AppleUSBMergeNub 900.4.1
com.apple.driver.AppleXsanScheme 3
com.apple.iokit.IOAHCIFamily 2.8.1
com.apple.driver.AppleThunderboltDPInAdapter 4.1.3
com.apple.driver.AppleThunderboltDPAdapterFamily 4.1.3
com.apple.driver.AppleThunderboltPCIDownAdapter 2.0.2
com.apple.driver.AppleThunderboltNHI 4.0.4
com.apple.iokit.IOThunderboltFamily 5.1.0
com.apple.iokit.IO80211Family 1110.26
com.apple.driver.mDNSOffloadUserClient 1.0.1b8
com.apple.iokit.IONetworkingFamily 3.2
com.apple.driver.corecapture 1.0.4
com.apple.driver.AppleIntelLpssGspi 2.0.59
com.apple.driver.AppleIntelLpssDmac 2.0.59
com.apple.driver.AppleIntelLpssI2C 2.0.59
com.apple.driver.usb.AppleUSBXHCIPCI 1.0.1
com.apple.driver.usb.AppleUSBXHCI 1.0.1
com.apple.iokit.IOUSBFamily 900.4.1
com.apple.iokit.IOUSBHostFamily 1.0.1
com.apple.driver.AppleUSBHostMergeProperties 1.0.1
com.apple.driver.AppleEFINVRAM 2.0
com.apple.driver.AppleEFIRuntime 2.0
com.apple.iokit.IOHIDFamily 2.0.0
com.apple.iokit.IOSMBusFamily 1.1
com.apple.security.sandbox 300.0
com.apple.kext.AppleMatch 1.0.0d1
com.apple.driver.AppleKeyStore 2
com.apple.driver.AppleMobileFileIntegrity 1.0.5
com.apple.driver.AppleCredentialManager 1.0
com.apple.driver.DiskImages 417.2
com.apple.iokit.IOStorageFamily 2.1
com.apple.iokit.IOReportFamily 31
com.apple.driver.AppleFDEKeyStore 28.30
com.apple.driver.AppleACPIPlatform 4.0
com.apple.iokit.IOPCIFamily 2.9
com.apple.iokit.IOACPIFamily 1.4
com.apple.kec.Libm 1
com.apple.kec.pthread 1
com.apple.kec.corecrypto 1.0

[Sartuche24]

I installed 5.4 499 on January 25th. Prior to that I was running 5.2.5 and didn't have any issues and I ran it for a couple months after it came out. Now I was having crashes with 5.2.5 at first but I more less did an upgrade and that didn't work out but I fully removed FortiClient then reinstalled it from scratch and it was solid since. I was having some other issues with SSL VPN but what I was experiencing wasn't fixed with 499 as it has to do with DNS Suffixesand its broke in 5.2.5 and 499. I may go back to 5.2.5 just because it was stable and I'm afraid of the problems everyone is experiencing. I can't tell you the last time I experienced a crash other than I know it was before November 6th when I installed 5.2.5.

[seadave]

I'm running MacOS 10.11.2 and FortiClient 5.4.0.493 (public build) on a Macbook Air.  I've never had a crash.  I have AirWatch on the system but no other AV.  Maybe folks with the crashing have a conflicting security app?

Anyway, I can connect just fine (I'm also using a FAC for 2FA with Fortitoken (boy was that fun to setup!), but the one MAJOR problem that is keeping me from deploying this is the inability to set a search domain for the FC IPSec connections.  Using the native PPTP or L2TP MacOS client, I can set a search domain of company.local and then I can ping hosts via FQDN and hostname only.  Requiring users to use FQDNs only is a non-starter and would break apps that don't give you that option like SharePoint URLs from workflows.

I've crawled the XML config and this does not appear to be an option.  You really need to expose more of the config options such as full crypto options in the UI.  Too much of it is in the config only.  Maybe EMS gives you more granular control?  I'm fully licensed for FC and it registers with my FG when I connect.

@Chris.Lin_FTNT, I appreciate you monitoring this thread.  I gave it to my FN Rep the other day regarding the code quality that is coming out.  We really need you all to step up your game for things as critical as this.  We also expect a company like FN to be more nimble than someone like Apple and come up with a solution before waiting for them to put out a fix (which ironically they appear to do more often at this point).  So do you know how I can assign a search domain to the FC IPSec connection?  Here's the ironic part, it works as it should using a SSLVPN full tunnel and FC.  I can't figure out what the difference is or what I have done that might cause it not to work.  Please advise.

[repmeer]

I have the same problem. I am running OSX 10.11.4 beta 3