VPN not working on mobile devices after 7.0.14 upgrade

[ICTSZU]

We upgraded our cluster from 7.0.12 to 7.0.14 due to critical vulnerability.

Now we have the issue that mobile devices (Android) cannot connect to the VPN anymore.

We end up getting the error: "Cloud not retrieve auth ID" and the redirect is not working properly.

And it seems we are not the only one:

FortiClient VPN SSLVPN on Android no longer working : r/fortinet (reddit.com)

Anyone else with the same issue?

Is there already a fix for this problem?

[smaruvala]

Hi,

- Are you using SAML for the authentication?

- Where do you see the error "Cloud not retrieve auth ID"?

- Are you seeing any connection refused message if you are using SAML and while redirecting to SAML connection?

- What is the FortiClient version you are using?

Regards,

Shiva

Regards,

Shiva

[ICTSZU]

HI,

• yes we use SAML Azure SSO
• right after entering the 2FA Code
• No, connection to SAML is fine. The M365 Login windows works and the 2FA Pop-up within Microsoft Authenticator is also showing up. After entering the 2FA code, the browser redirects to 127.0.0.0 and a small pop-up says "could not retrieve auth-id"
• the latest available on the Google Play Store, we deinstalled and installed the latest one

regards,

S

[TI_SOUCY]

Same issue here, caused by the same 7.0.14 update.
Here we have the 7.2.1.0118 Android client.
We get the Auth ID error right after entering the MFA code (Azure SSO)

[hbac]

Hi @ICTSZU,

Have you tried older FortiClient versions (7.0.x) to see if the works? 

Regards, 

[TI_SOUCY]

No we don't have any older version to test. Some Android devices allow uninstalling updates, but ours don't.
However I can confirm the problem started right after we installed FortiOS 7.0.14 on February 9th. Since the 7.2.1.0118 Android client was released in December, it worked for over a month with FortiOS 7.0.13.

[smaruvala]

Hi,

I am suspecting it could be matching a reported issue. I would suggest you to contact the support to check the logs. If it is the same issue then it will be fixed in 7.2.2 forticlient version which will be released soon.

Regards,

Shiva

[Alberto_Eurofins]

Same issue here. 
It seems a bug of this version

[azv]

We also have this problem after updating to 7.0.14.

Only Android cannot connect. iPhone and PC work.

[matjazm]

Is this an issue only on SSL-VPN or DialIN IPSec aswell?

What about on v7.2.7?