Helpful ReplyFortiClient VPN Problems With OSX 10.11 El Capitan

Page: 12345.. > >> Showing page 1 of 8
Author
danjahner
Bronze Member
  • Total Posts : 2
  • Scores: 8
  • Reward points: 0
  • Joined: 2015/09/12 14:51:21
  • Status: offline
2015/09/12 15:00:51 (permalink)
5 (4)

FortiClient VPN Problems With OSX 10.11 El Capitan

I installed the GM candidate of Mac OS X 10.11 El Capitan and my FortiClient VPN has stopped working. It completes the login, but after connection, no data is transferred - the incoming and outgoing freeze. It is a split tunnel connection and neither network or internet traffic works. 
 
I tried disabling the firewall and System Integrity Protection, but neither had any effect. 
#1
tobiacaneschi.work
New Member
  • Total Posts : 1
  • Scores: 2
  • Reward points: 0
  • Joined: 2015/09/14 03:36:29
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/14 03:41:51 (permalink)
5 (1)
Same for me. Can we have a beta version ?
 
danjahner
I installed the GM candidate of Mac OS X 10.11 El Capitan and my FortiClient VPN has stopped working. It completes the login, but after connection, no data is transferred - the incoming and outgoing freeze. It is a split tunnel connection and neither network or internet traffic works. 
 
I tried disabling the firewall and System Integrity Protection, but neither had any effect. 




#2
nsissrq
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/09/15 10:48:21
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/15 10:52:01 (permalink)
0
I'm having the exact same issue here as well.  It seems to be DNS related, as I am able to ping IP addresses, but cannot ping FQDNs.  I can perform nslookups.  Websites do not load when using FQDN, only when using IP.  I had to add some entries in my /etc/hosts file in order to even do basic work while connected to the company's VPN due to this bug.  It's a workaround for the time being, but we will definitely need a fix soon... El Cap comes Sept 30!
#3
ecr80
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/04/29 09:13:04
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/15 19:32:58 (permalink)
0
Have exactly the same problem. Hope it's solved soon!
#4
rwdorman
Silver Member
  • Total Posts : 80
  • Scores: 2
  • Reward points: 0
  • Joined: 2013/10/22 14:29:12
  • Location: New York, NY
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/17 05:59:14 (permalink)
0
There is another known bug with both El Cap and Yosemite in the current release that causes kernel panics, we're told its fixed in 5.2.5 but no ETA on release.

-rd
2x 200D Clusters
1x 100D
1x 60D
FortiOS 5.2
FortiAP 221C
FAZ 200D
#5
lzs
New Member
  • Total Posts : 6
  • Scores: 4
  • Reward points: 0
  • Joined: 2015/09/21 15:02:35
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/22 01:26:46 (permalink) ☄ Helpfulby lubyou 2015/09/23 03:41:34
5 (1)
I've been trying since the first public beta, and now on the final GM Candidate. The VPN problem is there. Basically, what is wrong is that OS X's resolver is sending traffic out through the primary (original) network interface, even though the route table correctly shows that the VPN tunnel (ppp0) should be used.
 
When you use a command like nslookup, the DNS traffic goes through the VPN tunnel (ppp0) properly.
 
DNS name resolution  fails because my VPN client is told to use my corporate DNS server, but my corporate DNS server refuses to serve name queries from outside the corporate network. When the FortiClient VPN is connected, OS X's name resolution traffic arrives at the DNS server with the client's public Internet IP address, and hence is refused by my DNS server.
 
Technically, this looks like an OS X bug. Or, perhaps there really is something wrong that FortiClient is dong. Either way, I hope FortiNet can rectify or take it up with Apple to fix El Capitan.
#6
lzs
New Member
  • Total Posts : 6
  • Scores: 4
  • Reward points: 0
  • Joined: 2015/09/21 15:02:35
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/22 15:05:15 (permalink)
5 (1)
danjahner
The OSX update released 09/22 (El Capitan Update 10.11.1) resolved this issue.




It doesn't for me. Just installed 10.11.1, tested, and had the same issue as before.
#7
rtem
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/09/22 11:32:12
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/23 09:21:27 (permalink)
0
danjahner
The OSX update released 09/22 (El Capitan Update 10.11.1) resolved this issue.


The same for me. Just updated to 10.11.11.
Still not working.
What did you do to make it working?
#8
lzs
New Member
  • Total Posts : 6
  • Scores: 4
  • Reward points: 0
  • Joined: 2015/09/21 15:02:35
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/24 01:51:44 (permalink)
3 (2)
I logged a support ticket on this issue, and was told the current version of FortiClient was not supported on El Capitan. Pressing further on an update, seeing that El Capitan is GA next week, I got the reply that:
 
"I'm sorry but we do not have the requested information at the current moment. There no ETA yet on when FortiClient will be supported with Mac OS X 10.11 [El Capitan]."
 
I'm quite disappointed. It's like saying Windows 10 being due next week, and knowing they have a bug with Windows 10, and yet not having a clue about when that will get fixed. OS X may not be as big in numbers compared with Windows, but still a sizeable population of users are on it these days.
#9
Chris.Lin_FTNT
Gold Member
  • Total Posts : 310
  • Scores: 35
  • Reward points: 0
  • Joined: 2012/11/19 14:12:49
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/28 08:26:09 (permalink)
5 (1)
I have an FortiClient Mac interim build FortiClient_5.3.25.492_macosx.dmg here: https://www.dropbox.com/sh/cb0j4pxw1f8nq84/AABJBxUrmhiRfwHjAIBKe1DSa/mac?dl=0
 
Please try to see if it works for you.
#10
lzs
New Member
  • Total Posts : 6
  • Scores: 4
  • Reward points: 0
  • Joined: 2015/09/21 15:02:35
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/28 14:20:37 (permalink)
0
Chris.Lin
I have an FortiClient Mac interim build FortiClient_5.3.25.492_macosx.dmg here: https://www.dropbox.com/sh/cb0j4pxw1f8nq84/AABJBxUrmhiRfwHjAIBKe1DSa/mac?dl=0
 
Please try to see if it works for you.


Hi Chris, thanks, it's really good to know that someone's working on this issue!
 
I've just tested the build but the problem is not resolved. It's a bit different now. The resolver's traffic is sent through the tunnel "ppp0", but with the wrong source IP. It's using the source IP of the Mac's physical interface (e.g. "en0") instead of the VPN tunnel IP.
 
Using the "nslookup" command does see the DNS queries going through the tunnel "ppp0" with the proper source IP address, so this command works.
 
Hope this helps you! :)
#11
Chris.Lin_FTNT
Gold Member
  • Total Posts : 310
  • Scores: 35
  • Reward points: 0
  • Joined: 2012/11/19 14:12:49
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/28 15:16:40 (permalink)
0
I see.
 
How about clearing DNS cache, like this http://osxdaily.com/2014/11/20/flush-dns-cache-mac-os-x/
 
After this, does it still use wrong source IP?
#12
lzs
New Member
  • Total Posts : 6
  • Scores: 4
  • Reward points: 0
  • Joined: 2015/09/21 15:02:35
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/28 15:42:13 (permalink)
0
Chris.Lin
I see.
 
How about clearing DNS cache, like this http://osxdaily.com/2014/11/20/flush-dns-cache-mac-os-x/
 
After this, does it still use wrong source IP?


Hi Chris,
 
It's still sending the DNS queries with the wrong source IP after the cache flush. I don't think the cache flush would help anyway, since the resolver is in fact trying to send out the queries.
 
Hope this helps.
#13
Chris.Lin_FTNT
Gold Member
  • Total Posts : 310
  • Scores: 35
  • Reward points: 0
  • Joined: 2012/11/19 14:12:49
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/29 09:06:18 (permalink)
0
We have a problem to reproduce this issue :(  Maybe we installed 10.11 on another drive instead of upgrade?
 
I wonder how do you guys install 10.11?
#14
Jeff.FCT_FTNT
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/09/28 15:11:58
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/29 10:31:34 (permalink)
0
Could you attached
1. the sslvpn log file
2. the ifconfig settings
3. FOS config file
 
thanks
 
 
 
#15
Jeff.FCT_FTNT
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/09/28 15:11:58
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/29 14:39:26 (permalink)
0
And FCT config file too.
#16
lzs
New Member
  • Total Posts : 6
  • Scores: 4
  • Reward points: 0
  • Joined: 2015/09/21 15:02:35
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/30 06:45:36 (permalink)
0
Chris.Lin
We have a problem to reproduce this issue :(  Maybe we installed 10.11 on another drive instead of upgrade?
 
I wonder how do you guys install 10.11?


I have El Capitan upgraded over Yosemite.
 
#17
jweber
New Member
  • Total Posts : 16
  • Scores: 2
  • Reward points: 0
  • Joined: 2014/10/31 08:38:58
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/30 09:43:06 (permalink)
0
Would you advise people not to upgrade to El Capitan if we use a Forticlient SSL VPN?
#18
jweber
New Member
  • Total Posts : 16
  • Scores: 2
  • Reward points: 0
  • Joined: 2014/10/31 08:38:58
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/09/30 13:40:52 (permalink)
5 (1)
Jeff: I'm having the same DNS problem, on a clean install. I sent you the logs and config files via PM -- let me know if you need anything else.
#19
Sridhar
New Member
  • Total Posts : 11
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/10/01 02:30:46
  • Status: offline
Re: FortiClient VPN Problems With OSX 10.11 El Capitan 2015/10/01 06:06:01 (permalink) ☄ Helpfulby kevinboos 2015/10/01 06:45:08
0
Facing the same issue. Latest FortiClient(5.3*) did not fix it.
But, FortiClient 4.0.2082 did not have any such issues(though it occasionally stops tunneling on its own).
 
Waiting for a fix like everyone, but 4.0.2082 is letting me work for time being.
#20
Page: 12345.. > >> Showing page 1 of 8
Jump to:
© 2019 APG vNext Commercial Version 5.5