Technical Tip: How to resolve the error: 'Current session is expired, click Refresh to continue.'

It is necessary to confirm access to the URLs of the tenant of FortiMail Cloud without UTM inspection or WAN balancing.

• example-com-1.fortimailcloud.com.
• example-com-2.fortimailcloud.com.

Note: If multiple WAN links or SD-WAN are used, configure the access to these URLs through a single link instead of load balancing to avoid session expiration issues.

This is an example of configuration in a FortiGate with SD-WAN.

Definition of SD-WAN rule:

Definition of firewall policy:

Important note: To validate the correct application of the policy, execute the following command in the FortiGate:

diagnose firewall fqdn list-all | grep -A3 "fortimail"

If the output is missing or does not match the name resolution, it is necessary to validate the DNS server configured on the FortiGate.