When using FortiClient (macOS), Web Filter and Real Time Protection may not function properly unless the following steps are taken:
- Reboot the Mac in recovery mode by holding down the Command and R keys.
- Go to Utilities and start the Terminal.
- Issue the following command:
spctl kext-consent disable
- Reboot the machine.
- In the Terminal, enter the following command.
The FortiClient module com.fortinet.fct.kext.avkern2/fctapnke should be listed. The Web Filter and Real Time Protection features should function as configured.
For the source of this solution, see Apple Support.
If using MDM with an Enterprise solution, note the FortiClient team ID is AH4XFXJ7DK.