forticlient for iOS not working

[kinmun]

we have users using IOS reported not able to access LAN and DMZ segment.

the same user tested his profile on a macbook and everything works fine.

what else is need to configure the forticlient for IOS ?

our firmware on the fortigate is 5.2.1

[Christopher_McMullan]

Yes, to clarify, it's only FortiClient which would not allow you to create a tunnel connection. You can use the built-in IPSec client in iOS to connect to a FortiGate appliance. In OS 5.2, the FortiGate can even do most of the work for you behind the scenes if you opt for the wizard.

[kinmun]

I m trying to setup the IPSec for IOS but there is always this error,

is this normal?

[Christopher_McMullan]

I can't see clearly from the summary lines why Phase 1 negotiations are failing.

Can you provide diagnostic output, or screenshots showing the details from one of those log messages?

diag debug reset

diag debug enable

diag debug application ike -1

<attempt to connect to the VPN, then...>

diag debug reset

diag debug disable

[Simpalm]

kinmun wrote:

we have users using IOS reported not able to access LAN and DMZ segment.

the same user tested his profile on a macbook and everything works fine.

what else is need to configure the forticlient for IOS ?

our firmware on the fortigate is 5.2.1

Thanks for sharing such a valuable post. I must say its quite informative. Keep posting such articles. www.simpalm.com 

[ayushinwizards]

To troubleshoot the issue with FortiClient on iOS not being able to access the LAN and DMZ segments, please consider the following steps:

1. FortiGate Firmware:

   • Consider upgrading FortiGate firmware (5.2.1 is outdated).

2. FortiClient Configuration:

   • Verify correct settings on FortiClient iOS, matching MacBook.

3. iOS Version:

   • Ensure iOS device runs a supported version.

4. Network Connectivity:

   • Confirm proper internet connectivity; check device security settings.

5. Logs:

   • Collect and analyze logs from FortiClient (iOS) and FortiGate.

6. Security Policies:

   • Review FortiGate policies; ensure they allow iOS traffic.

7. Authentication and Permissions:

   • Confirm user permissions on FortiGate; check authentication settings.

8. Fortinet Support:

   • If issues persist, contact Fortinet support for assistance.

Hope, this step will resolve your issue