forticlient for iOS not working

[kinmun]

we have users using IOS reported not able to access LAN and DMZ segment.

the same user tested his profile on a macbook and everything works fine.

what else is need to configure the forticlient for IOS ?

our firmware on the fortigate is 5.2.1

[Christopher_McMullan]

How are FortiClient iOS devices connecting - SSLVPN web portal, or are they being restricted on-net or off-net?

[kinmun]

no restrictions.

the user logging in has admin rights and have access to all the segments.

he installed the forticlient for IOS on his phone. 

should i asked him to try the web portal ??

[Christopher_McMullan]

Just to be clear, I mean: where are iOS clients connecting from? Internal to your network? Externally using a VPN? Externally through a VIP?

Where are the clients in terms of your network topology when their access attempts fail?

[kinmun]

connecting from external to LAN through the fortigate firewall.

eg. telnet to network devices in the LAN failed after logging from the forticlient on the IOS phone.

everything works if the user login using his macbook laptop with the same userid and password.

[Christopher_McMullan]

How far do iOS clients get in the telnet process before it fails? Can you provide a screenshot?

[kinmun]

we are using sslvpn to login to office network from external. eg at home using normal  Internet line.

seems like IOS user cannot only do web browsing but not others like telnet or ssh or RDP to servers.

is sslvpn support in version 5.2.1 or 5.2.3 for IOS ?

[Christopher_McMullan]

You can use Java-based applets and connection tools within the SSLVPN web portal to initiate non-HTTP traffic to internal resources, but unfortunately, the SSLVPN app itself (FortiClient) does not create a traditional tunnel. You would not be able to use Safari or a native telnet app on the iPhone to connect to resources.

We're waiting on Apple for this.

[kinmun]

so no matter what method of VPN I used, it will get the same results ?

i was thinking using IPSEC dialup client on the IOS to connect to the firewall

[Holy]

IPSes should work.

kinmun wrote:

so no matter what method of VPN I used, it will get the same results ?

i was thinking using IPSEC dialup client on the IOS to connect to the firewall