In this recipe, you will learn how to create an on a FortiGate, and connect to it using the default client built into the Mac OS. This VPN configuration allows Mac users to securely access an internal network as well as browse the Internet through the VPN tunnel. This recipe was tested using Mac OS 10.10.2 (Yosemite).

As of now there was no VPN Client 5.x available for MAC OS. Cisco has developed the AnyConnect Secure Mobility Client as a “next generation” Virtual.

Find this recipe for other FortiOS versions 5.2 1. Configuring the IPsec VPN using the IPsec VPN Wizard Go to VPN > IPSec > Wizard. Name the VPN connection and select Dial Up – Cisco Firewall and click Next. Set the Incoming to the internet-facing interface.

Select for the Authentication Method. Enter a pre-shared key, select the appropriate User Group, then click Next. Set Local Interface to an and set Local Address to the local address. Enter an range for VPN users in the Client Address Range field then click Next. The IPsec VPN Wizard finishes with a summary of created objects.

Go to Policy & Objects > Objects > Addresses and confirm that the wizard has created the IPsec VPN firewall address range. Go to Policy & Objects > Policy > and confirm that the wizard has created the policy from the VPN tunnel interface to the internal interface. 2. Creating a security policy for remote access to the Internet Under Policy & Objects > Policy > IPv4, create a security policy allowing remote users to access the Internet securely through the FortiGate unit.

Set Incoming Interface to the tunnel interface and set Source Address to all. Set Outgoing Interface to the Internet-facing interface and Destination Address to all. Set Service to ALL and enable. The policy should appear in the policy list at Policy & Objects > Policy > IPv4. Green screen software. Connecting to the IPsec VPN using the native Mac client On the Mac, go to System Preferences > Network and click the Plus (+) button. Set Interface to VPN, set VPN Type to Cisco IPSec, and click Create. Set the Server Address to the FortiGate IP address, configure the network account details for the remote user, then click Authentication Settings.

Select Shared Secret and enter the pre-shared key you created, then click OK. Results On the Mac, ensure that the VPN is selected and click Connect. The Status should change to Connected and you should be given an IP Address in the range specified. You should also be able to browse the Internet, protected by whichever profiles you applied to the security policy created in.

On the FortiGate unit, go to VPN > Monitor > IPsec Monitor and verify that the tunnel Status is Up, and that there are Incoming and Outgoing Data. For further reading, check out in the.

In your Downloads folder, double-click the anyconnectx.dmg file to open it. An icon will appear on the desktop called AnyConnect, and a separate window will open. • Double-click on AnyConnect.mpkg to run the installer, then follow the steps to complete the installation. Starting the VPN Client • In your Applications folder, go to the Cisco folder and double-click the Cisco AnyConnect Secure Mobility Client. • Enter vpn.uci.edu in the Ready to Connect to field, then press the Connect button. • Select your desired connection profile from the Group drop-down menu: • UCIFULL – Route all traffic through the UCI VPN.

• IMPORTANT: Use UCIFULL when accessing Library resources. • UCI – Route only campus traffic through the UCI VPN. All other traffic goes through your normal Internet provider. • Enter your UCInetID and password, then click OK.

• A banner window will appear. Click Accept to close that window. You are now connected! Disconnecting the VPN Client When you are finished using the VPN, remember to disconnect. • Click the AnyConnect client icon located in the menu bar near the top right corner of your screen.

• Select Quit.