11:23:02 AM error sslvpn FortiSslvpn: 14948: Error find interface for local_gwy 39fa19ac 11:23:02 AM info sslvpn FortiSslvpn: 14228: Ras: connection to fortissl terminated Log information that stands out (sensitive info adjusted): I have now loaded a small extension which monitors her internet connectivity to hopefully if I can correlate internet drops to disconnects I may get somewhere. Also her fortivpn virtual adapter reverts to the static IP that was used when the connection was active which just causes even more issues when she reconnects.
FORTICLIENT VPN ERROR FREE
If you are using the free FortiClient v6.2 VPN(-only) you have a limited feature set (please refer to FortiClient VPN 6.2) for example you are not able to perform host-checks. The VPN does not disconnect but all her access/connectivity disappears. Additional comments on the FortiClient v6.2. She does not think it is that since it happens on other connections as well. I believe that it is an issue with her internet connection stability. I advise however to try to solve the problem on the client’s post because this solution is just a workaround.Certain users (specifically one) are having disconnects from VPN on forticlient. Try to go down to medium and if it still does not work, set it to “low” to validate that the problem comes from there.
For this, you must change the “algorithm” parameter in the SSL VPN configuration on the Fortigate CLI with the following commands: config vpn ssl settingsīy default the parameter is set to “high”.
FORTICLIENT VPN ERROR MAC
SSL state:fatal bad record mac (195.141.249.9)Īs you can see, the SSL_accept state is failed that mean that no suitable algorithm suits has been found between the client en the server. The only solution I found at the moment is to configure the Fortigate so that it allows these weaker cryptographic suites.
SSL state:SSLv3/TLS read client key exchange (195.141.249.9) SSL state:SSLv3/TLS write server done:system lib(195.141.249.9) SSL state:before SSL initialization (195.141.249.9) In my case, I saw the following: allocSSLConn:280 sconn 0x7ffda0976400 (0:root) To analyze SSL VPN traffic on Fortigate, open a SSH connection to it and run the following commands: diagnose debug application sslvpn -1Īnd try to establish a connection with the computer that cause problem.
FORTICLIENT VPN ERROR WINDOWS
Both running the same Windows version… Forced to admit that I did not find the problem on the computer, I decided to analyze the connection attempt directly on the Fortigate. Actually, I was not able to understand what cause this difference between my computer and the computer of the collaborator. I was very surprised to show that the connection was successful ! Please note that I used exactly the same Forticlient version.Īfter this observation, I concluded that the problem is on the client computer. Our corporate VPN started taking strain from the increased load, and a new alternative. My second test was to trying to establish the connection from another computer with the same account and credentials. The chances are that the error is due to a firewall restriction. This behaviour appeared just after upgrading the Firewall to 5.4.4 to 5.6.3, so the first thing I thinked is that the version of Forticlient is too old, but even after upgrading the Forticlient to the latest version available the problem was the same. Each time the collaborator wants to establish the connection with the VPN Gateway (a Fortigate 100D, running FortiOS 5.6.3), the following error appears after the connection process reached 40% : Last week, I was confronted to a strange problem with a customer which use Forticlient from Fortinet to establish SSL VPN access from outside to its office.
0 kommentar(er)
