All three VPN types (SSL VPN, IKEv2 VPN, and Clientless SSL VPN) are available for Mac OS X 10.9 (Mavericks) and higher. The following instructions will help you create and use the VPN option of your choice. For more information on the VPN types, see VPN.
Click on the FortiClient icon on your task bar. Click Disconnect. Using the IKEv2 VPN Option on Mac OS X Setup the CAEDM IKEv2 VPN on MacOS (above 10.11) Beginning with MacOS 10.11 (El Capitan), Apple has provided IKEv2 VPN support built-in to MacOS. FortiClient VPN Problems With OSX 10.11 El Capitan I installed the GM candidate of Mac OS X 10.11 El Capitan and my FortiClient VPN has stopped working. It completes the login, but after connection, no data is transferred - the incoming and outgoing freeze. It is a split tunnel connection and neither network or internet traffic works.
1Using the SSL VPN Option on Mac OS X
2Using the IKEv2 VPN Option on Mac OS X
Using the SSL VPN Option on Mac OS X
This option works best on Mac OS X versions below 10.11 (El Capitan). Endpoint security checkpoint vpn for macos catalina download.
Setup the CAEDM SSL VPN on Mac OS X
Using your web browser, go to https://vpn.et.byu.edu
NOTE: If you get an orange login screen, then you have entered the wrong address and you will not be able to login. Try again with the exact address listed above.
In the blue Please login box, enter your username and password
Click Login
In the FortiClient Download box, click FortiClient Mac
NOTE: You can alternatively download the FortiClient for Mac from https://www.forticlient.com.
Run the client installer you just downloaded. The install process will:
Unpack the installer
Run a virus scan
Present you will a license agreement, which you will have to accept to continue
Prompt for Complete or VPN only install; choose the VPN Only button
Prompt for an install location; accept the default
Prompt to confirm your previous settings and continue the install
Install the client
NOTE: The installer will create a new 'fortissl' adapter in your list of network connections. Do not change or remove the fortissl adapter, or the SSL VPN will not work
Prompt to finish the install; Click Finish
Open the FortiClient either from the Spotlight, or from the FortiClient icon in the menu bar.
Click Configure VPN
Click the SSL-VPN button at the top, if it is not already selected
In the Connection Name field, enter CAEDM SSL VPN
In Remote Gateway, type in vpn.et.byu.edu
Click Apply, and then click Close
To connect to the CAEDM SSL VPN
Open the FortiClient application, either from your menu bar if FortiClient was automatically started, or from the Spotlight
Select the CAEDM SSL VPN connection, if it is not already selected
Enter your Username and Password in the appropriate fields
Click Connect
To disconnect from the CAEDM SSL VPN
Click on the FortiClient icon on your task bar.
Click Disconnect.
Using the IKEv2 VPN Option on Mac OS X
Setup the CAEDM IKEv2 VPN on MacOS (above 10.11)
Beginning with MacOS 10.11 (El Capitan), Apple has provided IKEv2 VPN support built-in to MacOS. The following instructions were based on MacOS 10.13 (High Sierra), but should be similar for 10.11 (El Capitan) and 10.12 (Sierra).
Screenshots are available after the instructions (click to view full size).
Open System Preferences, and click on Network. Click the plus icon in the bottom left of the Network Preferences window.
Select VPN under Interface.
Select IKEv2 under VPN Type.
Type a description for the VPN in the Service Name box (for example, CAEDM IKEv2 VPN).
Click create.
Enter vpn.et.byu.edu for Server Address and Remote ID.
Click Authentication Settings.
Select Username in the drop-down menu.
Type your CAEDM username and password in their respective text boxes.
Click OK.
Click Connect.
At this point, you should be successfully connected to the CAEDM VPN!
Setup the CAEDM IKEv2 VPN on Mac OS X (below 10.11)
Apple has yet to release official IKEv2 support for Mac OS X. While the strongSwan IKEv2 client works, you must change your Network Location each time you connect or disconnect with the VPN. Otherwise OS X will ignore settings provided by the VPN, and be unable to find other computers. For this reason, the SSL VPN client is easier to use when using a Mac. If the SSL VPN does not work for you, or if you would still like to use the IKEv2 VPN instead, the instructions are as follows:
NOTE: The following instructions are based on OS X 10.9 (Mavericks) and 10.10 (Yosemite). Other versions of OS X may vary.
Download the strongSwan client zip file from http://download.strongswan.org/osx/strongswan-5.3.0-1.app.zip
Double click the strongswan-5.3.0-1.app.zip file you just downloaded. This will extract the archive in the current folder
Drag the strongSwan application to your Applications folder
Double click the strongSwan application
Confirm that you want to open an application downloaded from the Internet by clicking Open
NOTE: You will now have a light-gray swan icon in your menu bar. This will be the only indication strongSwan is running.
Click on the light-gray strongSwan icon in the menu bar, and click Add Connection..
In the Connection name field, enter CAEDM IKEv2 VPN
In the Authentication selector, choose IKEv2 EAP
In the Server address field, enter vpn.et.byu.edu
In the Username field, enter your CAEDM username
Open up the System Preferences application
Select Network
Unlock the settings by clicking on the padlock icon on the left side
In the Authenticate dialog, enter your password for your computer, and click Unlock
In the Location field, select Edit Locations
Click the + button, and in the new entry type CAEDM IKEv2 VPN Location
Click Done. The Location field should now say CAEDM IKEv2 VPN Location
Click the Advanced.. button at the bottom of the Network settings window
Click the DNS tab
Under the DNS Servers box, click the + button
In the new entry, type 128.187.48.2
Under the DNS Servers box, click the + button again
In the new entry, type 128.187.56.2
Click OK
Click Apply at the bottom of the Network window
Close the Network window by clicking on the red dot in the upper left corner
Click the Apple icon in the menu bar
Point to Location, and click Automatic
To connect to the CAEDM IKEv2 VPN
Start the strongSwan app from the Spotlight (if it isn't already running)
Click on the light-gray strongSwan icon in the menu bar
Point to CAEDM IKEv2 VPN, and click on Connect
In the Password required dialog that pops up, enter your CAEDM password, and click OK
NOTE: When the light-gray strongSwan icon in the menu bar changes to black, you are connected to the VPN. But, you must change the Network Location, or you will be unable to connect to other computers.
Click the Apple icon in the menu bar
Point to Location, and click CAEDM IKEv2 VPN Location
You are now connected to the CAEDM IKEv2 VPN.
To disconnect from the CAEDM IKEv2 VPN
Click on the strongSwan icon in the menu bar
Point to CAEDM IKEv2 VPN, and click Disconnect
NOTE: When the black strongSwan icon in the menu bar changes to light-gray, you are disconnect from the VPN. But you must change the Network Location back to Automatic, or you will be unable to connect to other computers.
Click the Apple icon in the menu bar
Point to Location, and click Automatic
You are now disconnected from the CAEDM IKEv2 VPN
Retrieved from 'https://caedm.et.byu.edu/wiki/index.php?title=VPN_Instructions_for_Mac_OS_X&oldid=7958'
All three VPN types (SSL VPN, IKEv2 VPN, and Clientless SSL VPN) are available for Mac OS X 10.9 (Mavericks) and higher. The following instructions will help you create and use the VPN option of your choice. For more information on the VPN types, see VPN.
1Using the SSL VPN Option on Mac OS X
2Using the IKEv2 VPN Option on Mac OS X
Using the SSL VPN Option on Mac OS X
This option works best on Mac OS X versions below 10.11 (El Capitan).
Setup the CAEDM SSL VPN on Mac OS X
Using your web browser, go to https://vpn.et.byu.edu
NOTE: If you get an orange login screen, then you have entered the wrong address and you will not be able to login. Try again with the exact address listed above.
In the blue Please login box, enter your username and password
Click Login
In the FortiClient Download box, click FortiClient Mac
NOTE: You can alternatively download the FortiClient for Mac from https://www.forticlient.com.
Run the client installer you just downloaded. The install process will:
Unpack the installer
Run a virus scan
Present you will a license agreement, which you will have to accept to continue
Prompt for Complete or VPN only install; choose the VPN Only button
Prompt for an install location; accept the default
Prompt to confirm your previous settings and continue the install
Install the client
NOTE: The installer will create a new 'fortissl' adapter in your list of network connections. Do not change or remove the fortissl adapter, or the SSL VPN will not work
Prompt to finish the install; Click Finish
Open the FortiClient either from the Spotlight, or from the FortiClient icon in the menu bar.
Click Configure VPN
Click the SSL-VPN button at the top, if it is not already selected
In the Connection Name field, enter CAEDM SSL VPN
In Remote Gateway, type in vpn.et.byu.edu
Click Apply, and then click Close
To connect to the CAEDM SSL VPN
Open the FortiClient application, either from your menu bar if FortiClient was automatically started, or from the Spotlight
Select the CAEDM SSL VPN connection, if it is not already selected
Enter your Username and Password in the appropriate fields
Click Connect
To disconnect from the CAEDM SSL VPN
Click on the FortiClient icon on your task bar.
Click Disconnect.
Using the IKEv2 VPN Option on Mac OS X
Setup the CAEDM IKEv2 VPN on MacOS (above 10.11)
Beginning with MacOS 10.11 (El Capitan), Apple has provided IKEv2 VPN support built-in to MacOS. The following instructions were based on MacOS 10.13 (High Sierra), but should be similar for 10.11 (El Capitan) and 10.12 (Sierra).
Screenshots are available after the instructions (click to view full size).
Open System Preferences, and click on Network. Click the plus icon in the bottom left of the Network Preferences window.
Select VPN under Interface.
Select IKEv2 under VPN Type.
Type a description for the VPN in the Service Name box (for example, CAEDM IKEv2 VPN).
Click create.
Enter vpn.et.byu.edu for Server Address and Remote ID.
Click Authentication Settings.
Select Username in the drop-down menu.
Type your CAEDM username and password in their respective text boxes.
Click OK.
Click Connect.
At this point, you should be successfully connected to the CAEDM VPN!
Forticlient For El Capitan Update
Setup the CAEDM IKEv2 VPN on Mac OS X (below 10.11)
Apple has yet to release official IKEv2 support for Mac OS X. While the strongSwan IKEv2 client works, you must change your Network Location each time you connect or disconnect with the VPN. Otherwise OS X will ignore settings provided by the VPN, and be unable to find other computers. For this reason, the SSL VPN client is easier to use when using a Mac. If the SSL VPN does not work for you, or if you would still like to use the IKEv2 VPN instead, the instructions are as follows:
NOTE: The following instructions are based on OS X 10.9 (Mavericks) and 10.10 (Yosemite). Other versions of OS X may vary.
Download the strongSwan client zip file from http://download.strongswan.org/osx/strongswan-5.3.0-1.app.zip
Double click the strongswan-5.3.0-1.app.zip file you just downloaded. This will extract the archive in the current folder
Drag the strongSwan application to your Applications folder
Double click the strongSwan application
Confirm that you want to open an application downloaded from the Internet by clicking Open
NOTE: You will now have a light-gray swan icon in your menu bar. This will be the only indication strongSwan is running.
Click on the light-gray strongSwan icon in the menu bar, and click Add Connection..
In the Connection name field, enter CAEDM IKEv2 VPN
In the Authentication selector, choose IKEv2 EAP
In the Server address field, enter vpn.et.byu.edu
In the Username field, enter your CAEDM username
Open up the System Preferences application
Select Network
Unlock the settings by clicking on the padlock icon on the left side
In the Authenticate dialog, enter your password for your computer, and click Unlock
In the Location field, select Edit Locations
Click the + button, and in the new entry type CAEDM IKEv2 VPN Location
Click Done. The Location field should now say CAEDM IKEv2 VPN Location
Click the Advanced.. button at the bottom of the Network settings window
Click the DNS tab
Under the DNS Servers box, click the + button
In the new entry, type 128.187.48.2
Under the DNS Servers box, click the + button again
In the new entry, type 128.187.56.2
Click OK
Click Apply at the bottom of the Network window
Close the Network window by clicking on the red dot in the upper left corner
Click the Apple icon in the menu bar
Point to Location, and click Automatic
To connect to the CAEDM IKEv2 VPN
Start the strongSwan app from the Spotlight (if it isn't already running)
Click on the light-gray strongSwan icon in the menu bar
Point to CAEDM IKEv2 VPN, and click on Connect
In the Password required dialog that pops up, enter your CAEDM password, and click OK
NOTE: When the light-gray strongSwan icon in the menu bar changes to black, you are connected to the VPN. But, you must change the Network Location, or you will be unable to connect to other computers.
Click the Apple icon in the menu bar
Point to Location, and click CAEDM IKEv2 VPN Location
You are now connected to the CAEDM IKEv2 VPN.
To disconnect from the CAEDM IKEv2 VPN
Click on the strongSwan icon in the menu bar
Point to CAEDM IKEv2 VPN, and click Disconnect
NOTE: When the black strongSwan icon in the menu bar changes to light-gray, you are disconnect from the VPN. But you must change the Network Location back to Automatic, or you will be unable to connect to other computers.
Click the Apple icon in the menu bar
Point to Location, and click Automatic
El Capitan Os X
You are now disconnected from the CAEDM IKEv2 VPN
Retrieved from 'https://caedm.et.byu.edu/wiki/index.php?title=VPN_Instructions_for_Mac_OS_X&oldid=7958'