Skip to main content
pegasokra
New Member
January 5, 2024
Question

Delay in accessing the network after connecting to SSL VPN + ZTNA

  • January 5, 2024
  • 4 replies
  • 2450 views

Hello,

 

I'm facing a problem, I have a FortiEMS delivering ZTNA TAGS to my users with FortiClient with telemetry.

 

What happens is that every time users access the SSL VPN they have to wait seconds or minutes to access its resources, it's like there's a delay.

 

Firewall policies have ZTNA tags to allow communication.

 

This is normal? If so, is there a way to bypass this delay somehow, or configure it so it doesn't occur?

4 replies

AEK
SuperUser
SuperUser
January 5, 2024

Hello

Try check in firewalls traffic log why the packets are blocked during the first minutes.

AEK
msolanki
Staff
Staff
January 6, 2024

IS the resources access via https proxy ? if its simple sslvpn then you can enable DTLS on FCT and SSL VPN setting on FortiGate also check the MTU size in policy

mpeddalla
Staff
Staff
January 6, 2024

Hello @pegasokra  ,

 

Thank you for contacting the Fortinet Forum portal.

 

-I would recommend verifying if the firewall policy is flow-based or proxy-based along with any inspections enabled on the firewall policy.

-Does it affect all users or specific user?

-Is there any particular time in the day or week they reported or all the time?

-Can you confirm the firmware version of fortiEMS and Forticlient you are using along with FortiGate?

-Please make sure DTLS is enabled on Forticlient along with Fortigate

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-DTLS-to-improve-SSL-VPN-performance/ta-p/193881

-Have you done any recent upgrades or changes on configurations?

 

Best regards,

Manasa.

 

If you feel the above steps helped to resolve the issue mark the reply as solved so that other customers can get it easily while searching on similar scenarios.

marcelolapolla
Visitor III
May 15, 2024

Hello,

 

I had the same problem on 2 new computers installed on our network. Both DELL and when removing the Dell Optimizer software the VPN connections normalized access.