When connection error is get, select 'Export logs'. Set the Log Level to Debug and select Clear logs. In the Logging section, enable Export logs. The default 'ip-pools' SSLVPN_TUNNEL_ADDR1 has 10 IP addresses. Check that SSL VPN 'ip-pools' has free IPs to sign out. Check the Release Notes to ensure that the FortiClient version is compatible with the version of FortiOS.įortiClient uses IE security setting, In IE Internet options -> Advanced -> Security, check that Use TLS 1.1 and Use TLS 1.2 are enabled. To troubleshoot FortiGate connection issues. Check the browser has TLS 1.1, TLS 1.2, and TLS 1.3 enabled.
Ensure FortiGate is reachable from the computer.
It follows this pattern: - Check the correct port number in the URL is used. Check that the policy for SSL VPN traffic is configured correctly. Go to Policy -> IPv4 Policy or Policy -> IPv6 policy. Check the restrict access setting to ensure the host connected from is allowed. To troubleshoot getting no response from the SSL VPN URL: Use the following diagnose commands to identify remote user authentication issues. Remote user authentication debug command. SSL established: DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1 SSL state:SSL negotiation finished successfully (172.20.120.12) SSL state:SSLv3 read finished A:system lib(172.20.120.12) SSL state:SSLv3 write change cipher spec A (172.20.120.12) SSL state:before/accept initialization (172.20.120.12) The CLI displays debug output similar to the following: These commands enable debugging of SSL VPN with a debug level of -1 for detailed results. Use the following diagnose commands to identify SSL VPN issues. This article describes how to troubleshoot SSL VPN issue.
0 kommentar(er)
