Skip to main content
Maarten87
Maarten87
New Member
March 12, 2019
Solved

FortiClient compliant but no access to data

  • March 12, 2019
  • 17 replies
  • 21612 views

Hi All,

 

Not sure if this is the correct place to ask, but i hope someone might be able to assist.

In our current configuration, we are using Forticlient 6.0.3. They connect to a FortiGate 61E using SSL VPN.

Some of our users are getting issues, that when they are working from home, they cannot access our company's network.

We have multiple people with the same problem.

 

Below is one of many issues we are facing at the moment:

Person is in the office. Connects to our WIFI, which is not part of our internal network. Connects SSL VPN and is compliant. Can access our internal network.

 

Person is at home. Connects to their home WIFI, which is not part of our internal network. Connects via SSL VPN and is compliant. Can not access our internal network.

 

We are also facing below issue:

Person is at home. Connects to their home WIFI, which is not part of our internal network. Connects via SSL VPN and is compliant according to the client and the admin portal from Fortigate. Can not access our internal network.

If i start a internet browser on above client, it states that it is not compliant and that it has detected Forticlient version "0.0.0".

 

Hope someone is able to assist, as this it pretty critical. Makes working from home impossible.

    Best answer by Maarten87

    This has been resolved for us when we updated FortiOs to version 6.0.6

    According to support:

    Please be informed that I have found a well known issue on Fortigate known issue number: 0521645 that is related to traffic over sslvpn with compliance enabled. This issue is already resolved in FortiOS versions 6.0.5 and 6.2.1.

    17 replies

    SteveG
    SteveG
    New Member
    March 13, 2019

    We don't use the Compliance feature but the SSL VPN is rock solid for us. Whether that's using FortiClient or one of the Linux SSL VPN clients. What version of code is the FortiGate running?

    Maarten87
    Maarten87Author
    New Member
    March 13, 2019

    Hi,

    FortiGate is running on FortiOs version: FortiOS v5.6.8 build1672 (GA)

    it is very strange as, some users(not all) reported that the next day for example, it is working again from home.

     

    Yesterday i had a colleague who was working from home. good WIFI signal. Started VPN and made connection, everything went fine. FortiClient showed he was compliant. I checked Fortigate admin panel - under Forticlient Monitor and it showed he was compliant. I open a browser and the forticlient page pops up stating that it is not compliant because it detected version 0.0.0. We have it set so people need to have version 6.0.2. This person has version 6.0.3 so it should work. He also tried this through hotspot via phone. Same story.

    In the end i couldn't fix the VPN issue......

     

    Today, i am checking this same user, and he is working fine through VPN today. No changes have been made on either our side or the user's side.

    SteveG
    SteveG
    New Member
    March 13, 2019

    Sounds like a compatibility issue between FortiGate OS and the FortiClient version. I'll see if there's a compatibility chart somewhere.

    Terms & ConditionsAccessibility statement
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.