Skip to main content
Explorer
May 4, 2026
Question

AGENTLESS ZTNA Tutorial

  • May 4, 2026
  • 37 replies
  • 437 views

Hello there,

can anyone suggest any other tutorial for agentless ZTNA rather than fortinet official documentation. I don’t understand it how to implement correctly. any video, documentation, guides, articles would be appreciated. 

37 replies

steven4Author
Explorer
May 18, 2026

Is it possible to implement ZTNA with Evaluation Version of Fortigate? 

steven4Author
Explorer
May 18, 2026

is it possible to implement ZTNA with local users on fortigate or should it be connected to SAML, LDAP, Radius?

Yurisk
SuperUser
SuperUser
May 18, 2026

No, if you mean free FortiCloud based evaluation license, then it does not support strong TLS cyphers, and it will not work with such Fortigate.

 

yurisk.info - all things Fortinet blog, no ads
steven4Author
Explorer
May 19, 2026

how about this case? for example, ZTNA is established with LDAP on eval fortigate. and certificate is self-generated. will it work? 

 

steven4Author
Explorer
May 19, 2026

Troubleshooting
how to solve this issue? please any ideas. i have implemented the ZTNA on two devices, but still getting this error. 

 

 

[V][p:7134][s:8274]       wad_vs_ssl_c2p_check_alpn         :24835 wsp=0x7f5041e78048, alpn=h2
[V][p:7134][s:8274]       wad_vs_ssl_c2p_check_alpn         :24844 wsp=0x7f5041e78048, vs server set alpn http2
[V][p:7134][s:8274]       wad_vs_proxy_match_vhost          :4714  2:ZTNA-web-proxy: matching vhost by: portal.ztna.com
[V][p:7134][s:8274]       wad_pattern_matcher_search        :1226  pattern-match succ:portal.ztna.com
[I][p:7134][s:8274]       wad_vs_proxy_match_vhost          :4722  2:ZTNA-web-proxy: matched vhost(ztna-web-portal-fqdn 0x7f503cc31660)
[E][p:7134][s:8274]       wad_vs_find_cipher                :10538 wsp 0x7f5041e78048 ssl no matching CipherSuite, abort
[I][p:7134][s:8274]       wad_ssl_app_port_fts_in_close     :20148 sp=0x7f5041e78048/10 recv close request from fts close-type=0 closed=0
[I][p:7134][s:8274]       wad_ssl_port_task_end             :18270 sp=0x7f5041e78048/10 state=1 good=0
[I][p:7134][s:8274]       wad_tcp_port_proc_end             :829   tcp=0x7f5041e80048 socket=122 good=0 both ends closed.
[I][p:7134][s:8274]       wad_ssl_app_port_out_ops_close    :20663 sp=0x7f5041e78048/10 closed=1 out_shutdown=0 graceful=0
[I][p:7134][s:8274]       wad_ssl_port_close                :23361 sp=0x7f5041e78048/10 state=5, half=0
[I][p:7134][s:8274]       wad_ssl_sock_port_out_ops_close   :19892 sp=0x7f5041e78048/10 closed=0
[I][p:7134][s:8274]       wad_ssl_negotiate_close           :2782  nego=0x7f503ccb9c08
[I][p:7134][s:8274]       wad_tcp_port_proc_end             :874   tcp 0x7f5041e80048 closed on sock 122 
[I][p:7134][s:8274]       wad_tcp_port_end_event            :782   sock 122 close

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!