MacOS problems with FortiClient VPN

[Kevin14]

Hello,

Recently, in my company we've changed to FortiClient VPN. 

All the computers of the company with Windows are working correctly and have a correct connection with the VPN Server, but in a specific department we have a Macbook Pro, and this seems to be not working as it has to. 

The device has the MacOS Monterey 12.6.3, it is updated at the maximum available, the problem with this device is that the connection is established but after literally 4 minutes, it's automatically closed. 

I've researched some information based on the logs of the FortiClient, but nothing has worked for me. 

I proceed to show the logs, if someone can help me out with this, I'll appreciate it.

The first one is extracted from fortytray.log, and the second is from vpn-provider.log:

20241128 11:33:58 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:699 VPN tunnel provider Main status changed: Connecting
20241128 11:33:58 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:988 On VPN status change: Connecting -> Connecting
20241128 11:33:58 TZ=+0100 [FortiTray:INFO] VpnManager.swift:1034 VPN connecting
20241128 11:33:59 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:699 VPN tunnel provider Main status changed: Connected
20241128 11:33:59 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:988 On VPN status change: Connecting -> TunnelRunning
20241128 11:33:59 TZ=+0100 [FortiTray:INFO] VpnManager.swift:1037 VPN tunnel running
20241128 11:33:59 TZ=+0100 [FortiTray:INFO] VpnManager.swift:1054 Install DNS for split tunnel
20241128 11:33:59 TZ=+0100 [FortiTray:DEBG] AppDelegate.swift:988 Setting Regular VPN Username: #####(User used)
20241128 11:33:59 TZ=+0100 [FortiTray:DEBG] AppDelegate.swift:994 Show connect notification
20241128 11:33:59 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:33:59 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:33:59 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:34:02 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:34:02 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:34:02 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:34:02 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:699 VPN tunnel provider Main status changed: Disconnecting
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:988 On VPN status change: TunnelRunning -> Disconnecting
20241128 11:37:56 TZ=+0100 [FortiTray:INFO] VpnManager.swift:1148 VPN disconnecting
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:699 VPN tunnel provider Main status changed: Disconnected
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:946 No reconnect for VPN "AD". keep-running = false, reconnect-count = 0, keep-running-max-retry = 0
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:988 On VPN status change: Disconnecting -> DisconnectedBecauseOfError("Tunnel stopped bucause of network IO failed.", false, FortiTray.VpnStatus.DisconnectedErrorType.CommonError)
20241128 11:37:56 TZ=+0100 [FortiTray:INFO] VpnManager.swift:998 VPN disconnected because of error: Tunnel stopped bucause of network IO failed.
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:826 On VPN session end
20241128 11:37:56 TZ=+0100 [FortiTray:INFO] VpnManager.swift:834 Uninstall DNS for split tunnel
20241128 11:37:56 TZ=+0100 [FortiTray:INFO] VpnManager.swift:836 Uninstall DNS search domain for split tunnel
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:865 Waiting for VPN session to end
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] sslvpn_bridge.mm:607 VPN session wait until finished
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:867 VPN session ended
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VpnManager.swift:876 On VPN disconnected
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics
20241128 11:37:56 TZ=+0100 [FortiTray:DEBG] VPNMessageBridge.m:491 Request VPN statistics

-------------------------------------------------------------------------------------------------------------------------------------------

20241128 11:33:58 TZ=+0100 [VPN:INFO] PacketTunnelProvider.swift:42 VPN provider: 1645
20241128 11:33:58 TZ=+0100 [VPN:INFO] PacketTunnelProvider.swift:56 Start Destination IP tunnel.
20241128 11:33:58 TZ=+0100 [VPN:DEBG] PacketTunnelProvider.swift:148 Mode: 0
20241128 11:33:58 TZ=+0100 [VPN:INFO] SSLVPNTunnel.swift:1114 Starting TLS tunnel
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SSLVPNTunnel.swift:1120 Remote Hostname: vpnssl.delafruit.com
20241128 11:33:58 TZ=+0100 [VPN:INFO] SSLVPNTunnel.swift:1055 TLS tunnel connection state: PREPARING
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SSLVPNTunnel.swift:1019 TLS tunnel connection state: READY
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SSLVPNTunnel.swift:1020 remote IP: XX.XX.XX.XX
20241128 11:33:58 TZ=+0100 [VPN:INFO] SSLVPNTunnel.swift:191 Tunnel method: TUN
20241128 11:33:58 TZ=+0100 [VPN:INFO] SSLVPNTunnel.swift:227 VPN tunnel is established
20241128 11:33:58 TZ=+0100 [VPN:INFO] PacketTunnelProvider.swift:530 Configuring IPv4
20241128 11:33:58 TZ=+0100 [VPN:DEBG] PacketTunnelProvider.swift:535 IPv4 include routes
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SystemConfig.swift:212 Get DNS from Setup domain
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SystemConfig.swift:242 Copy service entity failed
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SystemConfig.swift:212 Get DNS from State domain
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SystemConfig.swift:212 Get DNSSearchDomain from Setup domain
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SystemConfig.swift:242 Copy service entity failed
20241128 11:33:58 TZ=+0100 [VPN:DEBG] SystemConfig.swift:212 Get DNSSearchDomain from State domain
20241128 11:33:58 TZ=+0100 [VPN:INFO] PacketTunnelProvider.swift:684 Block IPv6 on IPv4 VPN
20241128 11:37:56 TZ=+0100 [VPN:EROR] SSLVPNTunnel.swift:461 Got an error when read packet: nil
20241128 11:37:56 TZ=+0100 [VPN:INFO] SSLVPNTunnel.swift:1042 TLS tunnel connection state: CANCELLED
20241128 11:37:56 TZ=+0100 [VPN:EROR] SSLVPNTunnel.swift:856 Closed with an error on the tunnel connection: Optional(com_fortinet_forticlient_macos_vpn_nwextension.VPNTunnelExitStatus.ioFailed)

If someone has some information about where's the problem, or what I can try to fix this...

Thanks!

Kevin

[AEK]

Hi Kevin

I'd try the following:

• If you are using FCT VPN 7.4.0, try with some different versions, like 7.0.13, 7.2.5 and 7.4.1
• Try connect to VPN through the Ethernet adapter (copper) instead of WiFi
• Try disable SSL-VPN's asic-offload on FGT and see if the error persists

[olu]

Hello @AEK can you please guide me on how to download versions 7.0.13, 7.2.5 and 7.4.1
I tried searching for it on Fortinet page https://www.fortinet.com/search?q=FCT+VPN+7.0.13  but nothing popped up. It will be nice if you can help with the link. Thank you

[AEK]

Hi Olu

You can download them from the support portal, from menu Support > Firmware Download > FortiClient, then select the version you need.

However I'm not sure if you need a valid support contract for that.

[olu]

I am also having the same issue especially with MacBooks running on the latest OS.