Technical Tip: VPN Server may be unreachable (-14)

A few users are facing issues while connecting to a VPN and getting the error 'VPN Server may be unreachable (-14)'.

Host check verifies whether the user device has AntiVirus, firewall, both, or other custom security software enabled on the Windows device. If the 'Host Check' option is enabled in config SSL VPN configuration on the FortiGate. (SSL VPN Portals -> Tunnel Mode -> Host Check) then this error will show if the host is not complying with the host check settings.

To disable it with CLI:

config vpn ssl web portal
    edit "tunnel-access"
        set host-check none 
    next
end

Another possible reason why the user may not be able to connect to SSL VPN and encounters the error 'Unable to establish the VPN connection. The server may be unreachable. (-14)' is if tunnel mode is not enabled in the SSL VPN portal.

Ensure that the user/group is linked to the correct portal and that the portal has tunnel mode enabled.