Hello everyone!
I'm newbie and I have a question about the SSL VPN on Fortigate. I'm using a 501E for the DMZ zone, I config SSL VPN with Mac host check following this guide: https://kb.fortinet.com/kb/documentLink.do?externalID=FD41648 and It works fine with windows and MacOS. The Forticlient send MAC of the device to the firewall so only the specific device can connect to the tunnel.
But the problem is on the iphone device ( I'm using IP XR with IOS 13) the Forticlient doesnt send MAC to Fortigate so It cannot connect to the tunnel.
The IOS LOG is attached, please kindly review it for me.
Thanks a lot!
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Did you get this answered?
I am wanting to know if host check can be enabled for iOS (Apple iPAD's) & Android devices.
Same problem here
Check the below KB:
"Due to security reason,Android & IOS will not allow Apps to be able to trace units and their users anymore.
Hence Forticlient will not be able to fetch real MAC address of the mobile units.
Hence MAC check does not work in Mobile units."
The above document explains the mac addr host check not working in all version of Android and iOS. How about the OS version check? Customer wants to know if sslvpn can host check the IOS v17.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1633 | |
1063 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.