This works for me with both native VPN client on El Capitan 10.11.4 and
Forticlient 5.4.0.493, just update on phase 1 of your VPN, add DH group
14 and that will fix the issue, it appears that OSX 10.11.4, requires a
minimum of a 2048 bit modulus (DH ...