FortiEMS/FortiClient - VPN Tunnel with Multiple Gateways, Security Alert

Forum|Forum|2 years ago
April 17, 2024
6 replies
2636 views

Hello,

I have a strange behavior with our FortiClient's tunnels.

Created a Remote Access profile on our FortiEMS, it's a VPN Tunnel with 4 remote gateways.
Created DNS records for our public IP addresses from FortiGates via Let'sEncrypt.

Now when I try to connected to that one tunnel it will prompt me the "Security Alert" on 40% before it makes the connection.

But if I create 4 separate tunnels and not 1 tunnel with multiple gateways then I don't get the prompt with "Security Alert", the connection is established normally.

Does anybody have a clue what this can be, probably some limitations with multiple gateways..

Best answer by ozkanaltas

Hello @Infotech22 ,

This problem is related to IP addresses. If you use an IP address instead of fqdn this warning will be shown. Can you try just with fqdn?

ozkanaltas

Valued Contributor III

Hello @Infotech22 ,

All configured GW addresses configured with fqdn? Do you have any gw addresses configured with IP addresses?

Or maybe your FortiGate could not renew your certificate. Can you check your SSL certificate? You can use this tool to check your ssl-certificate.

https://www.ssllabs.com/ssltest/

Infotech22Author

Explorer III

Hello @ozkanaltas,

Thank you for replying.
No, only first 2 Gateways are configured with FQDN.
They are order from FQDN to IP Addresses, so first 2 are FQDN

I double checked Certificates and they are trusted