FortiClient Unable to SSLVPN

Forum|Forum|5 years ago
June 30, 2021
3 replies
2820 views

Hello, my FortiGate 2000E is not letting a FortiClient connect today (worked yesterday)

I put the FG into debug mode, got this when the user failed:

Destroy sconn 0x7f7dd367d800, connSize=2. (root) SSL_accept failed, 5:(null) Destroy sconn 0x7f7dd3551400, connSize=3. (root)

What do I do to fix this? LG

Raff

New Member

Hello,

Have you found a sollution? I have the same problem ;(

pminarik

Staff

Hi,

If I remember correctly(!), Windows checks internet connectivity by trying to resolve the domain "www.msftncsi.com" and then trying to open http://www.msftncsi.com/ncsi.txt . The expected result is a plain text saying "Microsoft NCSI".

Please check if your clients have the ability to resolve and open this. If not, then troubleshoot the individual elements of the chain. (DNS resolution and potentially DNS filtering, routing (split? full?), any sort of web-filtering applied?, firewall policy allowing this, etc.)

pminarik

Staff

[deleted]

Sign up

Login with SSO

Login to the community

Login with SSO