In case you’re out of luck, the following information will help you to adjust the parameters of the IPsec Tunnel on the FortiGate. The following steps were performed using macOS 10.15.7 and FortiOS 6.4.4. If using PKI, the FortiGate must present a valid certificate (macOS does check the FQDN and trust state).For certificate based authentication (PKI), the tunnel must operate in main mode.You have to concatenate the code directly after the password (without any separator character). FortiToken), Challenge-Response isn’t supported. When using two factor authentication (e.g.

Enter the Preshared Key (PSK) and optionally the Peer ID in the authentication options.Configure the server address and username.

Add a new network connection of the type “Cisco IPsec”.

The good news first: If you’re currently using the FortiClient to establish a Dialup IPsec VPN (Aggressive, PSK based), the same configuration should also work with the native macOS client.īecause the native macOS client doesn’t offer advanced parameters, the configuration is straight forward:

Osx vpn clients