Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
dungnguyen310
New Contributor

SSL VPN MAC host check doesn't work on IOS device

 Hello everyone!

 I'm newbie and I have a question about the SSL VPN on Fortigate. I'm using a 501E for the DMZ zone, I config SSL VPN with Mac host check following this guide: https://kb.fortinet.com/kb/documentLink.do?externalID=FD41648 and It works fine with windows and MacOS. The Forticlient send MAC of the device to the firewall so only the specific device can connect to the tunnel.

But the problem is on the iphone device ( I'm using IP XR with IOS 13) the Forticlient doesnt send MAC to Fortigate so It cannot connect to the tunnel.

 The IOS LOG is attached, please kindly review it for me.

 Thanks a lot! 

 
3 REPLIES 3
mr_vaughn
New Contributor III

Did you get this answered?

I am wanting to know if host check can be enabled for iOS (Apple iPAD's) & Android devices.

 

dionathan_chrys

Same problem here 

ezhupa
Staff
Staff

Check the below KB:

https://community.fortinet.com/t5/FortiClient/Technical-Tip-SSL-VPN-MAC-host-check-does-not-work/ta-...

 

"Due to security reason,Android & IOS will not allow Apps to be able to trace units and their users anymore.
Hence Forticlient will not be able to fetch real MAC address of the mobile units.


Hence MAC check does not work in Mobile units."

Labels
Top Kudoed Authors