Agentless ZTNA Troubleshooting

Question

Hello there,

if anyone has experience with implementing agentless ZTNA, I would really appreciate your help if you look at this issue and help me with that. i am trying but it is not working somehow. It is also very appreciated if you can offer consultation voluntarily or you know someone who can do it, please refer to them.

Here is the ticket: https://community.fortinet.com/support-forum-92/agentless-ztna-tutorial-227295?postid=228019#post228019

RBA · Answer

Hi Steven4,Screenshots shows error “ssl no matching CipherSuite, abort”[I][p:2721][s:5719] wad_vs_ssl_port_caps_c2p_on_client_hello:11221 15859:ZTNA-web-proxy: wsp(0x7f113fcbc048) handshake recv ClientHello record 3.1 client 3.3 supported 3.3[V][p:2721][s:5719] wad_vs_ssl_c2p_check_alpn :24833 wsp=0x7f113fcbc048, alpn=h2[V][p:2721][s:5719] wad_vs_ssl_c2p_check_alpn :24842 wsp=0x7f113fcbc048, vs server set alpn http2[V][p:2721][s:5719] wad_vs_proxy_match_vhost :466215859:ZTNA-web-proxy: matching vhost by: portal.ztna.com[V][p:2721][s:5719] wad_pattern_matcher_search :1226 pattern-match succ:portal.ztna.com[I][p:2721][s:5719] wad_vs_proxy_match_vhost :467015859:ZTNA-web-proxy: matched vhost(ztna-portal-vh 0x7f113f930e98)[E][p:2721][s:5719] wad_vs_find_cipher :10301 wsp 0x7f113fcbc048 ssl no matching CipherSuite, abortAs per ClientHello record 3.1 client 3.3 supported 3.3 TLS, version is TLS1.2. Just for testing can you set the max-version to tls1.2 and test.config firewall vip  edit ZTNA-web-proxy    set ssl-max-version tls-1.2  nextendor set the TLS version to 1.3 on the PC and check.

Sign up

Login with SSO

Login to the community

Login with SSO