Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The company I work for provide VPN access using the FortiClient for Windows. This is great for people running Windows but I also wish the connect using OS X.

As far as I can tell the VPN connection is made using IPSec for which OS X can create a connection. Should it be possible or is FortiClient using something proprietary?

If it is possible what will I need to set up the connection on OS X? For Windows our IT department provide a configuration file but this is specific for FortiClient.

share|improve this question
You can download FortiClient for Mac from – user147641 Nov 29 '12 at 19:35

There are two other great IPsec VPN Clients:

I currently use IPSecuritas to connect to many standard IPsec VPNs.

share|improve this answer

For IPSec, the built-in OS X client can do both L2TP and Cisco VPNs. If one of these basic systems is used then the built in client should work with the right settings.

In the past (when OS X 10.4 was the latest version), I've used a FortiClient VPN client with OS X. If they are using a proprietary IPSec implementation, they should still supply the OS X client to companies that are using their system.

I recommend talking to your company's IT folks for either config options or the client software.

share|improve this answer
Well, OS X uses racoon behind the scenes, so you can use the following trick to setup any IPsec configuration you desire even if it's not supported by GUI: add "include "/etc/racoon/remote/*.conf" ;" to /etc/racoon/racoon.conf just before the last include (which is "include "/var/run/racoon/*.conf" ;"). Then configure the VPN using GUI as much as you could and start the connection, while it tries to connect, grab the file in /var/run/racoon/ and save it to /etc/racoon/remote/ - now you can edit it the way you like and it will be used instead the one OS X generates :) – galaxy Sep 3 '15 at 11:18
Using the above approach I never needed to setup any 3rd party IPsec software :) – galaxy Sep 3 '15 at 11:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.