I lose local internet access when I connect to my VPN with Forticlient

VPN
1

I’m using Forticlient 7.0.9.0360 on my Macbook and when I connect to my VPN, I lose local internet access. I’m not sure which version I have on my PC but this does not happen. I’ve spent quite a bit of time searching for answers and have found a few posts indicating a setting that enables local internet access. I see very limited settings and none of them are relevant.

I found another post about exporting the settings and enabling local LAN access. However, the IMPORT button is greyed out so I don’t think I could implement any changes I made in that file.

2

If this is a company vpn you need to talk to your it department. There are a lot of controls available in the fortigate and no one here can help worth those.

If you are the person responsible for the fortigate, we would need more details of where your having issues. What your policies look like, etc.

3

Ask them to check check split tunnelling settings or Is your company use tenable, ask them if they are . Or try disabling ipv6

4

Can you ping 8.8.8.8 ? If yes, you have Internet access
Can you ping Google.com, does it resolve?
If not then it’s maybe wrongly configured dns server you’re getting via sslvpn

5

I had similar issue on MacOS Sonoma and earlier versions.
Here is how I fixed the issue:

  1. Find vpn.plist file, usually here:
    • /Library/Application Support/Fortinet/FortiClient/conf/vpn.plist
  2. Open file to edit:
    • sudo vim /Library/Application\ Support/Fortinet/FortiClient/conf/vpn.plist
    • press i to switch to edit mode
  3. Change InheritLocalDNS parameter from 0 to 1.
  4. Save and close (press ECS, then SHIFT+; then type wq and press enter).
  5. Restart your Forticlient.

Works for v7.4.0 and earlier.

See Forticlient MAC - DNS not resolving internal hostnames.

6

if this is resolved, I am curious to know what was causing the issue.

7

Your own internet has ipv6 enabled and the company vpn isnt blocking it or splitting it therefore it breaks your dns. You can disabled ipv6 on your side to confirm

8

I work for a small company and already messaged IT (department of 1). He just said that it has been known to happen. I’m curious why my PC works fine but my Macbook doesn’t.

9

This was the solution that worked for in my case.

10

Is pc work issued and mac not?

Edit:
If you use iCloud private relay it may be breaking the vpn.

11

Neither are work issued and both have iCloud on the local desktop. I’ll take a look at that link, thanks.