Resolved issues

The following issues have been fixed in FortiClient (macOS) 7.4.0. For inquiries about a particular bug, contact Customer Service & Support.

Application Firewall

Bug ID	Description
986928	Blocked (Unknown.Application) notification appears every few minutes.

Deployment and installers

Bug ID	Description
764672	FortiClient (macOS) displays deployment popup for user when EMS admin configured unattended installation.
916436	Initialize VPN system extension was failed error displays after FortiClient upgrade.
961137	Zero trust network access records do not populate in /etc/hosts when FortiClient is installed from Intune.
982204	Verified macOS endpoint gradually becomes unverified and last seen date is old even when still connected to EMS.

GUI

Bug ID	Description
786779	About page cuts off version information when displaying copyright information.
1003447	-1 and -2 showing under the Web Filter violation list category column for unknown and blocklisted URLs.

Logs

Bug ID	Description
987780	FortiAnalyzer does not see logs from FortiClient (macOS).

Remote Access

Bug ID	Description
720236	FortiClient does not support DH group 19-21.
834198	On an AWS VM, autoconnect does not work, and FortiClient displays Initialize VPN system extension was failed error.
941513	DH key exchange in IPsec VPN quick mode is mandatory when perfect forward secrecy is disabled.
965143	After upgrade, FortiClient (macOS) does not keep SAML cookies .
968070	FortiClient does not parse disallow_invalid_server_certificate attribute.
987299	Multifactor authentication prompt does not display for external RADIUS users with token authentication enabled.
987865	When connecting to SAML SSO VPN, user may not see VPN Connecting page.
999358	FortiClient (macOS) does not hide Save Password, Always up, and Auto-connect checkboxes when disallowed in EMS Remote Access profile.
999361	FortiClient (macOS) Remote Access tab displays SAML Login button for VPN tunnels with SAML authentication while FortiClient (Windows) displays Connect button.
1000595	User cannot disable SAML authentication in personal IPsec VPN tunnel created in FortiClient (macOS).

Remote Access - IPsec VPN

Bug ID	Description
932288	Enforcing disclaimer message acceptance does not work on IPsec VPN tunnels.
999674	IKEv2 connection fails with a connection was terminated unexpectedly error.
1001252	FortiClient (macOS) includes external browser single sign on toggle for IPsec VPN when it does not support it.

Remote Access - SSL VPN

Bug ID	Description
954004	FortiClient (macOS) cannot establish DTLS tunnel when handshake packet has a large MTU.
966377	FortiGate does not see security posture tag for macOS users when connected to SSL VPN.
966405	With FortiGate tunnel-connect-without-reauth enabled and auth-timeout is reached, FortiClient (macOS) continues to reconnect to VPN and ask for token.
977245	FortiClient for macOS 13 fails to autoconnect when endpoint wakes from sleep.
996693	SSL VPN with SAML authentication works only if sslvpn-web-mode is enabled on FortiOS.
999205	FortiClient (macOS) internal VPN browser is vulnerable to man in the middle attack.
1000591	SSL VPN tunnel with tunnel-connect-without-reauth and always-up enabled fails to reconnect.

FSSOMA

Bug	Description
962067	FSSOMA does not work with Apple local account type.

Malware Protection and Sandbox

Bug ID	Description
837638	Identify Malware and Exploits Using Signatures Received From FortiSandbox does not work.

Zero Trust telemetry

Bug ID	Description
951597	If the endpoint is bound to Active Directory (AD), FortiClient fails to sync with EMS with deeply nested AD group.

Other

Bug ID	Description
950099	Non-admin users cannot trust the new Web Filter certificate generated in the system keychain .
954591	FortiTray crashes as soon as FortiClient (macOS) establishes VPN connection.