Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
atsy
New Contributor

FortiClient VPN permission error on MacOS

I've installed FortiClient VPN only version and gave it full-disk and VPN permissions (to both: FortiClient.app and fctservctl2).

But when I try to connect to a VPN, it shows me an error: "To connect to a VPN with FortiClient, open Security & Privacy Settings and allow system software from FortiTray.". I've wanted to try to add FortiTray.app to the whitelist as well, but I cannot do it since it's located inside the FortiClient.app package.

How do I fix this?

9 REPLIES 9
ozkanaltas
Valued Contributor III

Hello @atsy ,

 

Did you do VPN step from this document?

 

You need to go System Preferences > Security & Privacy and allow FortiTray app

 

https://docs.fortinet.com/document/forticlient/7.2.4/macos-release-notes/223986/special-notices

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
atsy

Hi @ozkanaltas,

I've tried re-installing the app multiple times in order to do it, but this prompt never appeared

ozkanaltas
Valued Contributor III

Hello @atsy ,

 

Reinstall the FortiClient can't solve your problem. You need to click allow button on this screen. 

 

 

image.png

 

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
atsy

 

Security & Privacy page looks like this on my laptop and I've never got this prompt, as I mentioned earlier.

bKpwWMh

ozkanaltas
Valued Contributor III

Hi @atsy ,

 

In my opinion, it's related to macOS Sonoma. The same problem happened to another user and the problem was solved in this way.  Can you try it like that? 

 

So I tried the following:
- Close forticlient from the taskbar
- Delete the files from Library/LaunchDaemons
- Delete the files from Library/Application Support/Fortinet
- Uninstall forticlient using forticlientuninstaller.app
- Reboot the computer
- Install Forti client 7.2.2.0776

https://community.fortinet.com/t5/Support-Forum/Forticlient-7-2-2-Mac-OS-14-Sonoma/td-p/288341

 

 

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
atsy

I actually had Ventura, but I tried that on Ventura, then updated to Sonoma and tried that again, didn't work in both cases, still getting the same error.

 

 

Frend
New Contributor

Hello!

I am bumping into the exact same problem. 

No mention of Fortitray anywhere under my Privacy and Security window and no place where I might be able to allow it.
I have spent half day trying to install various older versions of the clients but same problem appears for full and free VPN client.

https://pasteboard.co/aQMHOlKvTKIS.png

https://pasteboard.co/YAWgDBQgYzIn.png


Best Regards,
Erkki S. 

Frend
New Contributor

Hello!

I found the cause of the problem and a working solution!

We are using MDM and it preapproves the TeamID-s.

Check if vpn extensions are allowed with 

systemextensionsctl list


If the teamID is not explicitly allowed from MDM with allowed extension profile then it is silently forbidden.

Ask your MDM admin create new allowed extension profile with following team-id and roll it out for your Mac:

AH4XFXJ7DK

 
Regards,
Erkki Saaremets

tulkha2
New Contributor

This unfortunately did not work. I followed each step; the only issue was the third. I did not have or could not find "Library/FortiClient" to delete. I was able to do everything else, but ran into the same problem. Password accepted, token not accepted, but no error message. Thanks, though https://mobdro.bio/ .

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors