Skip to main content
fabs
fabs
Visitor III
June 12, 2025
Question

FortiClientVPN Dialup IPsec SAML EntraID within in the same network

  • June 12, 2025
  • 1 reply
  • 1385 views

Hello all,

 

We use IPsec Dialup VPN with SAML via EntraID. When I try to connect via IPsec VPN inside same network in which the Fortigate is located, I get the error "ERR_EMPTY_RESPONSE" when calling SAML
Is this an expected behavior? If not, what could be the issue and how can I fix it?
If I'm connected outside of my Fortigate, all is working fine.


Similarly, we also have an SSL VPN via SAML EntraID and the login works within the same network.

Also the Single Sign-On settings for the IPsec SAML looks similar to the SSL SAML.

Screenshot 2025-06-12 094635.png

 

Fortigate: v7.6.3 build3510
FortiClientVPN 7.4.2.1737 / 7.4.3

Best Regards

fabs

1 reply

funkylicious
SuperUser
funkylicious
SuperUser
June 12, 2025

hi,

maybe something in here could help with your issue.

also, i assume the ike-saml-port used for IPsec is different from the port used in SSLVPN?

"jack of all trades, master of none"
    fabs
    fabsAuthor
    Visitor III
    June 12, 2025

    @funkylicious 
    Thanks for your reply. This thread you mentioned was original from me. But this issue related to something other.

    Yes SSL SAML and IPsec SAML has different ports.

    fabs
    fabsAuthor
    Visitor III
    June 12, 2025

    Btw if I use my iPhone via WiFi within the same network with latest FortiClientVPN, I've got the error prompt "The network connection was los."

    Terms & ConditionsAccessibility statement