FortiClient VPN permission error on MacOS

[atsy]

I've installed FortiClient VPN only version and gave it full-disk and VPN permissions (to both: FortiClient.app and fctservctl2).

But when I try to connect to a VPN, it shows me an error: "To connect to a VPN with FortiClient, open Security & Privacy Settings and allow system software from FortiTray.". I've wanted to try to add FortiTray.app to the whitelist as well, but I cannot do it since it's located inside the FortiClient.app package.

How do I fix this?

[ozkanaltas]

Hello @atsy ,

Did you do VPN step from this document?

You need to go System Preferences > Security & Privacy and allow FortiTray app

https://docs.fortinet.com/document/forticlient/7.2.4/macos-release-notes/223986/special-notices

[atsy]

Hi @ozkanaltas,

I've tried re-installing the app multiple times in order to do it, but this prompt never appeared

[ozkanaltas]

Hello @atsy ,

Reinstall the FortiClient can't solve your problem. You need to click allow button on this screen. 

[atsy]

Security & Privacy page looks like this on my laptop and I've never got this prompt, as I mentioned earlier.

[ozkanaltas]

Hi @atsy ,

In my opinion, it's related to macOS Sonoma. The same problem happened to another user and the problem was solved in this way.  Can you try it like that? 

So I tried the following:
- Close forticlient from the taskbar
- Delete the files from Library/LaunchDaemons
- Delete the files from Library/Application Support/Fortinet
- Uninstall forticlient using forticlientuninstaller.app
- Reboot the computer
- Install Forti client 7.2.2.0776

https://community.fortinet.com/t5/Support-Forum/Forticlient-7-2-2-Mac-OS-14-Sonoma/td-p/288341

[atsy]

I actually had Ventura, but I tried that on Ventura, then updated to Sonoma and tried that again, didn't work in both cases, still getting the same error.

[Frend]

Hello!

I am bumping into the exact same problem. 

No mention of Fortitray anywhere under my Privacy and Security window and no place where I might be able to allow it.
I have spent half day trying to install various older versions of the clients but same problem appears for full and free VPN client.

https://pasteboard.co/aQMHOlKvTKIS.png

https://pasteboard.co/YAWgDBQgYzIn.png

Best Regards,
Erkki S. 

[Frend]

Hello!

I found the cause of the problem and a working solution!

We are using MDM and it preapproves the TeamID-s.

Check if vpn extensions are allowed with 

systemextensionsctl list

If the teamID is not explicitly allowed from MDM with allowed extension profile then it is silently forbidden.

Ask your MDM admin create new allowed extension profile with following team-id and roll it out for your Mac:

AH4XFXJ7DK

 
Regards,
Erkki Saaremets

[tulkha2]

This unfortunately did not work. I followed each step; the only issue was the third. I did not have or could not find "Library/FortiClient" to delete. I was able to do everything else, but ran into the same problem. Password accepted, token not accepted, but no error message. Thanks, though https://mobdro.bio/ .