FortiClient VPN permission error on MacOS

[atsy]

I've installed FortiClient VPN only version and gave it full-disk and VPN permissions (to both: FortiClient.app and fctservctl2).

But when I try to connect to a VPN, it shows me an error: "To connect to a VPN with FortiClient, open Security & Privacy Settings and allow system software from FortiTray.". I've wanted to try to add FortiTray.app to the whitelist as well, but I cannot do it since it's located inside the FortiClient.app package.

How do I fix this?

[Anthony_E]

Hello @ozkanaltas,

Sure I can contact the docs team.Could you please indicate me what I should request?

Regards,

[ozkanaltas]

Hello @Anthony_E ,

Normally, this screen is given as below in the document. However, this screenshot and instructions are valid for old macOS versions.

https://docs.fortinet.com/document/forticlient/7.4.0/macos-release-notes/223986/special-notices

In new MacOS versions, this screen seems to have been moved to the area mentioned by @Dulasalem . It seems that adding the screenshot and path mentioned by @Dulasalem in the document will be sufficient.

[gmisa]

This worked to me, thanks !

[Jfumoleau]

Hello, for my part, the fortiTray.app is authorized but no change. The VPN is still blocked since the latest update version 7.2.5.0916 / MacOs Sequoia 15.1 update ok.

Are there other solutions? “Message notification: Forticlient VPN has been configured to block current zero trust tags” Thank you in advance for your help.

[Frend]

Hello!

I am bumping into the exact same problem. 

No mention of Fortitray anywhere under my Privacy and Security window and no place where I might be able to allow it.
I have spent half day trying to install various older versions of the clients but same problem appears for full and free VPN client.

https://pasteboard.co/aQMHOlKvTKIS.png

https://pasteboard.co/YAWgDBQgYzIn.png

Best Regards,
Erkki S. 

[Frend]

Hello!

I found the cause of the problem and a working solution!

We are using MDM and it preapproves the TeamID-s.

Check if vpn extensions are allowed with 

systemextensionsctl list

If the teamID is not explicitly allowed from MDM with allowed extension profile then it is silently forbidden.

Ask your MDM admin create new allowed extension profile with following team-id and roll it out for your Mac:

AH4XFXJ7DK

 
Regards,
Erkki Saaremets

[In_HLee]

FCT macOS 7.4.0 Release Notes has been updated as per the feedback.