Forticlient(VPN Only) 7.4.2 IPSec VPN not connecting

[curryb]

Hello, 

I am running into issues after updating to 7.4.2 to address FG-IR-23-278. Specifically IPSEC tunnel. The SSL works as expected, but not IPSEC. We use DUO for MFA, but it does not even getting to the point just stays at connecting... and then fails. Any thoughts? 

Thank you in advance!

Best, 
Brandon 

[AEK]

Hi Brandon

Is it Linux client or Windows client?

Did it work for you when it was 7.4.0 or 7.4.1?

[curryb]

Windows

I have not tried those versions because I am trying to  mitigate. https://www.fortiguard.com/psirt/FG-IR-23-278. 

[AEK]

Then you may try 7.2.8. It is vulnerability free (so far).

[tommytwotoes]

rutt-row

PSIRT | FortiGuard Labs

[curryb]

Yes, that is the correct notification. Thank you. No delta using 7.2.8 or 7.4.2. 

[AEK]

This is low vulnerability (3.2)

[MZBZ]

Hello Brandon,

Check this KB article if it you have a dialup IPSec IKEv2 tunnel that is not working after upgrade to EMS/FCT 7.4.1+

https://community.fortinet.com/t5/FortiClient/Troubleshooting-Tip-IKEv2-IPSec-VPN-on-FortiClient-v7-...

[curryb]

Thank you, but we are using VPN only version so those options are not available. 

[MZBZ]

They are available on both the free version and EMS side. Please check the article.