Technical Tip: How to resolve the error: 'Current session is expired, click Refresh to continue.'

Description

This article describes how to resolve the error: 'Current session is expired, click Refresh to continue.'

Scope

FortiMail Cloud, FortiGate.

Solution

It is necessary to confirm access to the URLs of the tenant of FortiMail Cloud without UTM inspection or WAN balancing.

• example-com-1.fortimailcloud.com.

• example-com-2.fortimailcloud.com.

Note:

If multiple WAN links or SD-WAN are used, configure the access to these URLs through a single link instead of load balancing to avoid session expiration issues.

This is an example of configuration in a FortiGate with SD-WAN.

Creation of the Addresses for the FortiMail. 

Go to Policy and Objects -> Addresses -> Create New. 

Name: “XXXXX”.

Type: FQDN.

FQDN: FortiMail FQDN (In this example example-com-1.fortimailcloud.com).

It is necessary to create the conditions for the 2 FQDNs of the FortiMails.

Definition of SD-WAN rule:

Go to NetWork -> SD-WAN ->  SD-WAN Rules ->  Create New And select the previously created FortiMail as the destination.

Definition of firewall policy:

Go to Policy & Objects ->  Firewall Policy ->  Create New Select the necessary origins and destinations for this communication.

Important note:

To validate the correct application of the policy, execute the following command in the FortiGate:

diagnose firewall fqdn list-all | grep -A3 "fortimail"

If the output is missing or does not match the name resolution, it is necessary to validate the DNS server configured on the FortiGate.