FortiClient-for-MacOS-v4.0-Patch-Release-3-Release-Notes.pdf

FortiClient for Mac OS v4.0 Patch Release 3Release Notes

May 07, 2012

04-403-169934-20120507

Copyright© 2012 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance metrics contained herein were attained in internal lab tests under ideal conditions, and performance may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to the performance metrics herein. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

Technical Documentation: http://docs.fortinet.com

Knowledge Base: http://kb.fortinet.com

Customer Service & Support: https://support.fortinet.com

Training Services: http://training.fortinet.com

http://docs.fortinet.com

http://kb.fortinet.com

http://support.fortinet.com

http://training.fortinet.com

FortiClient for Mac OS v4.0 Patch Release 3 Release Notes 04-403-169934-20120507 1 http://docs.fortinet.com/ • Feedback

Table of Contents

Change Log .............................................................................................. 2

Introduction.............................................................................................. 3Technical documentation ................................................................................. 3

Licensing........................................................................................................... 3

Supported operating systems .......................................................................... 3System requirements........................................................................................ 4

Special Notices ........................................................................................ 5General information .......................................................................................... 5

Reconnect after resuming from Mac sleep/hibernate/standby ........................ 5

Reconnect after IPsec phase 1 key expiration ................................................. 5IPsec VPN configuration instruction for FortiOS v4.0 MR3.............................. 5

IPsec VPN configuration instruction for FortiClient for Mac OS v4.0 Patch Release 3 .......................................................................................................... 5IPsec VPN configuration instruction for FortiOS v4.0 MR2.............................. 6

Installation Information ........................................................................... 7Upgrade from FortiClient Connect v4.0.0 GA................................................... 7

Upgrade from FortiClient v4.0 Patch Release 1/Patch Release 2.................... 7

Resolved Issues ....................................................................................... 8

Known Issues........................................................................................... 9

Image Checksums ................................................................................. 10

http://docs.fortinet.com/

http://docs.fortinet.com/surveyredirect.html


Change Log

Date Change Description

2012-05-07 Initial Release




Introduction

This document provides a summary of new features, installation instructions, resolved and known issues in FortiClient for Mac OS v4.0 Patch Release 3, build 0134.

FortiClient for Mac OS v4.0 Patch Release 3 contains bug fixes only; no new features were added in this release.

Technical documentation

The following documentation is available from the technical documentation website at http://docs.fortinet.com/fclient40.html

• QuickStart Guide for Mac OS

• FortiClient Licensing Guide for Mac OS

Articles and information on specific configuration issues are available at the knowledge base website at http://kb.fortinet.com

Licensing

Licensing of FortiClient for Mac OS is controlled by the FortiGate device (FortiOS v4.0 MR3 and later). FortiClient licenses can be purchased with your FortiGate support contract. FortiOS v4.0 MR3 Patch Release 4 and later does not require a license for VPN connections.

Supported operating systems

FortiClient for Mac OS v4.0 Patch Release 3 is supported by the following operating systems:

• Mac OS Lion (v10.7)

• Mac OS Snow Leopard (v10.6)

http://docs.fortinet.com/fclient40.html

http://kb.fortinet.com



Introduction System requirements


System requirements

FortiClient for Mac OS v4.0 Patch Release 3 has the following minimum system requirements:

• Intel processor

• 256MB of RAM

• 20MB of hard disk space

• TCP/IP communication protocol

• Ethernet NIC for network connections

• Wireless adapter for wireless network connections

• Abode Acrobat Reader for technical documentation




Special Notices

General information

Any IPsec VPN connections created from the FortiClient for Mac OS v4.0 Patch Release 3 Web-based Manager are only supported by FortiOS v4.0 MR3 and later. To create a compatible tunnel configuration on the FortiGate, go to VPN > IPsec > Auto Key (IKE) > Create FortiClient VPN.

Reconnect after resuming from Mac sleep/hibernate/standby

Any active VPN connection will be disconnected when Mac enters sleep/hibernate/standby mode; user will have to reconnect after Mac resumes.

Reconnect after IPsec phase 1 key expiration

Any active IPsec VPN connections will be terminated after the key life for the phase 1 proposal has expired; users will have to manually re-establish the connection. By default, the key life for phase 1 is 28800 seconds.

IPsec VPN configuration instruction for FortiOS v4.0 MR3

Described below are the steps to configure an interface mode IPsec VPN on FortiOS v4.0 MR3:

1 On the FortiGate (running v4.0 MR3) go to VPN > IPSec > Auto Key (IKE) page.

2 Select the Create FortiClient VPN button.

3 Fill the VPN tunnel configuration details on the page and click OK.

4 Verify that a phase1 and phase2 has been created for the VPN.

5 Configure appropriate firewall policies under Firewall > Policy page for VPN traffic.

IPsec VPN configuration instruction for FortiClient for Mac OS v4.0 Patch Release 3

Described below are the steps to configure an interface mode IPSec VPN on FortiClient for Mac OS v4.0 Patch Release 3:

1 Open the FortiClient console and navigate to IPSec VPN main page.

2 Click the + icon on the bottom-left corner to add a new connection.

Note: Any VPN tunnel created on the FortiGate using the Create FortiClient VPN button can only be used with FortiClient v4.0 MR3 and later, and is not supported for older FortiClient versions.



IPsec VPN configuration instruction for FortiOS v4.0 MR2 Special Notices

FortiClient for Mac OS v4.0 Patch Release 3 Release Notes 6 04-403-169934-20120507

http://docs.fortinet.com/ • Feedback

3 Input the following information on the Add Connection page.

Connection Name

Remote Gateway

Authentication Method

XAuth

Select OK

4 Select the VPN connection from the list and select Connect to establish the IPsec tunnel.

IPsec VPN configuration instruction for FortiOS v4.0 MR2

Described below are the steps to configure an interface mode IPsec VPN on FortiOS v4.0 MR2.

1 Create an address name for internal subnet if it doesn’t exist yet. (optional)

2 Create an user group for FortiClient users on User > User Group page.

3 Navigate to VPN > IPsec > Auto Key > Create Phase1 page and input the following information:

Name: (i.e. mydialup-phase1)

Remote Gateway (i.e. Dialup User)

Local Interface (i.e wan1)

Mode: Aggressive

Authentication Method

Enable IPSec Interface Mode option

XAUTH: Enable as server

User Group: <select the FortiClient user group>

Select OK

4 Navigate to VPN > IPsec > Auto Key > Create Phase2 page and input the following information:

Name: (i.e. mydialup-phase2)

Phase1: select the phase1 VPN created before (i.e. mydialup-phase1)

Select OK

5 From the FortiGate CLI, enter the following commands:config vpn ipsec phase1-interfaceedit <phase1 name>set mode-cfg enableset ipv4-start-ip <start ip address>set ipv4-end-ip <end ip address>set ipv4-netmask <network mask>set ipv4-split-include <address group> (optional setting)set ipv4-dns-server1 <server ip> (optional setting)

end

6 Configure appropriate firewall policies using Firewall > Policy page for VPN traffic.




Installation Information

Upgrade from FortiClient Connect v4.0.0 GA

Described below are the steps to upgrade from FortiClient Connect v4.0.0 GA to FortiClient v4.0 Patch Release 3:

1 Quit FortiClient Connect if it is running

2 Open Finder > Applications

3 Drag the ‘FortiClient Connect’ executable to Trash

4 Download the FortiClient v4.0 Patch Release 3 installer: FortiClient_4.0.3.134_macosx.dmg

5 Drag the FortiClient icon to the Applications folder

Upgrade from FortiClient v4.0 Patch Release 1/Patch Release 2

Described below are the steps to upgrade from FortiClient v4.0 Patch Release 1 or Patch Release 2:

1 From the FortiClient Web-based Manager select FortiClient > Check for Updates

2 Download the FortiClient v4.0 Patch Release 3 installer: FortiClient_4.0.3.134_macosx.dmg

3 Shutdown FortiClient

4 Drag the FortiClient icon to the Applications folder




Resolved Issues

The resolved issues listed below do not list every bug that has been corrected with this release. For inquires about a particular bug, please contact Customer Support.

Table 1: Resolved issues

Bug ID Description

159369 Some authentication/encryption methods are not supported.

162906 RADIUS users cannot login in to SSL-VPN tunnel mode.

165034 The route is not removed after the VPN is disconnected.

168672 SSL-VPN tunnel gets disconnected after 30 seconds.

168759 SSL-VPN client does not check server certificate.

https://support.fortinet.com




Known Issues

This section lists the known issues of this release, but is not a complete list. For inquires about a particular bug, please contact [email protected].

Table 2: Known issues

Bug ID Description

144252 Error messages sometimes do not contain meaningful feedback.

147729 A warning message about FCTUpgrader may pop up after install.

Workaround: Acknowledge the warning message.




Image Checksums

The MD5 checksums for all Fortinet software and firmware releases are available at the Customer Service & Support website located at https://support.fortinet.com. After logging in, click on Download > Firmware Image Checksum, enter the image file, including the extension, and select Get Checksum Code.

Figure 1: Fortinet customer support image checksum tool

(End of Release Notes)

https://support.fortinet.com



FortiClient-for-MacOS-v4.0-Patch-Release-3-Release-Notes.pdf

Documents

Transcript of FortiClient-for-MacOS-v4.0-Patch-Release-3-Release-Notes.pdf