Forticlient vpn 7.4.1 MFA issue

[tweenbee]

Hi All, 

I encountered a strange issue on my forticlient VPN version 7.4.1.

previously I have setup custom IPSEC VPN in my Fortigate FG500e with RADIUS/NPS user groups, and for a long time there were no issue.

in the few days back, the vpn client start having strange behavior, after I put my password is should have been keeping the password and asking for MS authenticator token. but now the forticlient remove the password making it blank and asking for authenticator.

when I put my authenticator token, it keep notifying "please provide password" :

for the record I'm using version 7.4.1.1736

the VPN is IPSEC not SSL

this issue only happens using RADIUS authentication, when using fortigate local user the vpn can be connected normally.

please help

[sjoshi]

when you say it is working before..was the FCT version same v7.4.1 or was there change in the version. also is the issue specific to some user or all user

[tweenbee]

The issue affect all user using radius/nps authentication. for local users created in FGT, no issue

[AEK]

Hi

Can you check on FGT if the RADIUS authentication still works?

In RADIUS config, just perform an authentication test, enter user and password and see if authentication is successful.

[tweenbee]

test successful in the FGT GUI and CLI, only when using FCT after entering password the field become blank then it ask for ms authenticator token

[btan]

If I reckon correctly, this may be a new bug in FCT 7.4.1 version.
Please test with FCT 7.4.0 and see if issue persist, I presume issue will not happen in FCT 7.4.0.

[AEK]

In addition to Bon's suggestion, in case 7.4.0 gives the same result then you may also try with older version, like 7.2.5 or 7.0.13.

[tweenbee]

Noted Bon, 

I'll try using 7.4.0

[Hostingmella]

To fix MFA issues with FortiClient VPN 7.4.1, ensure MFA is configured correctly on FortiGate or FortiAuthenticator and update FortiClient to the latest version. Double-check VPN settings and test MFA on different devices. Verify the MFA device and time synchronization, and check the logs for errors. If the issue persists, clear the FortiClient cache and reconfigure the VPN settings. Contact Fortinet support if needed.