Fortinet black logo

Special notices

Special notices

Enabling full disk access

FortiClient (macOS) works properly only when you grant permissions to access the full disk in the Security & Privacy pane for the following services:

  • fctservctl2
  • FortiClient

The following lists the services and their folder locations:

  • Fctservctl2: /Library/Application\ Support/Fortinet/FortiClient/bin/

  • FortiClient (macOS) application: /Applications/FortiClient.app

Activating system extensions

After you initially install FortiClient (macOS), the device prompts you to allow some settings and disk access for FortiClient (macOS) processes. You must have administrator credentials for the macOS machine to configure this change.

VPN

VPN works properly only when you allow system software from Fortinet to load in Security & Privacy settings.

To allow FortiTray to load:
  1. Go to System Preferences > Security & Privacy.
  2. Click the Allow button beside System software from application "FortiTray" was blocked from loading.

Web Filter and Application Firewall

You must enable the FortiClientNetwork extension for Web Filter and Application Firewall to work properly. The FortiClient (macOS) team ID is AH4XFXJ7DK.

To enable the FortiClientNetwork extension:
  1. Go to System Preferences > Security & Privacy.
  2. Click the Allow button beside System software from application "FortiClientNetwork" was blocked from loading.

  3. Verify the extension status by running systemextensionsctl list in the macOS terminal. The following provides example output when the extension is enabled:

Proxy mode extension

The com.fortinet.forticlient.macos.proxy system extension works as a proxy server to proxy a TCP connection. macOS manages the extension's connection status and other statistics. This resolves the issue that Web Filter fails to work when SSL and IPsec VPN are connected.

FortiClient (macOS) automatically installs the extension on an M1 Pro or newer macOS device.

Enabling notifications

After initial installation, macOS prompts the user to enable FortiClient (macOS) notifications.

To enable notifications:
  1. Go to System Preferences > Notifications > FortiGuardAgent.
  2. Toggle Allow Notifications on.

DHCP over IPsec VPN not supported

FortiClient (macOS) does not support DHCP over IPsec VPN.

Running multiple FortiClient instances

FortiClient (macOS) does not support running multiple FortiClient instances for different users simultaneously.

FortiGuard Web Filtering Category v10 Update

Fortinet has updated its web filtering categories to v10, which includes two new URL categories for AI chat and cryptocurrency websites. To use the new categories, customers must upgrade their Fortinet products to one of the versions below:

  • FortiManager - Fixed in 6.0.12, 6.2.9, 6.4.7, 7.0.2, 7.2.0, 7.4.0.
  • FortiOS - Fixed in 7.2.7 and 7.4.1.
  • FortiClient - Fixed in Windows 7.2.3, macOS 7.2.3, Linux 7.2.3.
  • FortiClient EMS - Fixed in 7.2.1.
  • FortiMail - Fixed in 7.0.7, 7.2.5, 7.4.1.
  • FortiProxy - Fixed in 7.4.1.

Please read the following CSB for more information to caveats on the usage in FortiManager and FortiOS: https://support.fortinet.com/Information/Bulletin.aspx

Related Videos

sidebar video

Installing the FortiClient Mac Agent & Giving Required Permissions

  • 25,780 views
  • 1 years ago

Special notices

Enabling full disk access

FortiClient (macOS) works properly only when you grant permissions to access the full disk in the Security & Privacy pane for the following services:

  • fctservctl2
  • FortiClient

The following lists the services and their folder locations:

  • Fctservctl2: /Library/Application\ Support/Fortinet/FortiClient/bin/

  • FortiClient (macOS) application: /Applications/FortiClient.app

Activating system extensions

After you initially install FortiClient (macOS), the device prompts you to allow some settings and disk access for FortiClient (macOS) processes. You must have administrator credentials for the macOS machine to configure this change.

VPN

VPN works properly only when you allow system software from Fortinet to load in Security & Privacy settings.

To allow FortiTray to load:
  1. Go to System Preferences > Security & Privacy.
  2. Click the Allow button beside System software from application "FortiTray" was blocked from loading.

Web Filter and Application Firewall

You must enable the FortiClientNetwork extension for Web Filter and Application Firewall to work properly. The FortiClient (macOS) team ID is AH4XFXJ7DK.

To enable the FortiClientNetwork extension:
  1. Go to System Preferences > Security & Privacy.
  2. Click the Allow button beside System software from application "FortiClientNetwork" was blocked from loading.

  3. Verify the extension status by running systemextensionsctl list in the macOS terminal. The following provides example output when the extension is enabled:

Proxy mode extension

The com.fortinet.forticlient.macos.proxy system extension works as a proxy server to proxy a TCP connection. macOS manages the extension's connection status and other statistics. This resolves the issue that Web Filter fails to work when SSL and IPsec VPN are connected.

FortiClient (macOS) automatically installs the extension on an M1 Pro or newer macOS device.

Enabling notifications

After initial installation, macOS prompts the user to enable FortiClient (macOS) notifications.

To enable notifications:
  1. Go to System Preferences > Notifications > FortiGuardAgent.
  2. Toggle Allow Notifications on.

DHCP over IPsec VPN not supported

FortiClient (macOS) does not support DHCP over IPsec VPN.

Running multiple FortiClient instances

FortiClient (macOS) does not support running multiple FortiClient instances for different users simultaneously.

FortiGuard Web Filtering Category v10 Update

Fortinet has updated its web filtering categories to v10, which includes two new URL categories for AI chat and cryptocurrency websites. To use the new categories, customers must upgrade their Fortinet products to one of the versions below:

  • FortiManager - Fixed in 6.0.12, 6.2.9, 6.4.7, 7.0.2, 7.2.0, 7.4.0.
  • FortiOS - Fixed in 7.2.7 and 7.4.1.
  • FortiClient - Fixed in Windows 7.2.3, macOS 7.2.3, Linux 7.2.3.
  • FortiClient EMS - Fixed in 7.2.1.
  • FortiMail - Fixed in 7.0.7, 7.2.5, 7.4.1.
  • FortiProxy - Fixed in 7.4.1.

Please read the following CSB for more information to caveats on the usage in FortiManager and FortiOS: https://support.fortinet.com/Information/Bulletin.aspx