Skip to main content
Georges_Orwell
New Member
September 18, 2014
Question

Fortigate 200D: Persistant alert " No SSL-VPN policies exist"

  • September 18, 2014
  • 8 replies
  • 9175 views
Hello all, I try to configure VPN SSL to provide remote access to end users. In VPN>SSL>SETTING there is warning message that say " No SSL-VPN policies exist. Click here to create a new SSL-VPN policy using these settings " But after created new policy with no warning or problem, it still warn with the same message. My UTM is fortigate 200D with FortiOS 5.2 Thank for your help Georges

    8 replies

    Georges_Orwell
    New Member
    September 19, 2014
    There is no one to help me ?
    ede_pfau
    SuperUser
    SuperUser
    September 19, 2014
    OK, I created one to see if there are any problems. No problems at all, running 5.2.1 on a 40C. First, I recommend to upgrade to 5.2.1 as many glitches have been removed. Then, clicking SSL > Settings, I got the message you are refering to: " No policy..." Continue to fill in all required fields. This is much easier now as for nearly all entry fields defaults are provided (even the portal). Click ' Apply' to see if all required fields are filled in. Policy warning still present. Click on the policy warning to create an (incoming) policy. This is from ' SSL.root' to the subnet which you would like to reach, usually ' internal' . Fill in all entries, and click OK. This will return you to the SSL > Settings dialog. Policy warning now is gone. You can add more policies for traffic originating from SSL VPN users, i.e. ' SSL.root' to ' dmz' or whatever.
    Georges_Orwell
    New Member
    September 19, 2014
    Thank you ede_pfau, I upgraded my fortigate with 5.2.1 and followed the same settings with ssl.root and all fields provided. But when i click on ok it say me Input value is invalid.
    ede_pfau
    SuperUser
    SuperUser
    September 19, 2014
    So there is progress - the error message changed! " Invalid input" might refer to special characters in an object' s name, like spaces, umlauts, any letter with an accent etc. Any chance that you use one of those?
    Georges_Orwell
    New Member
    September 19, 2014
    Oh is " _ " the special characters?
    ede_pfau
    SuperUser
    SuperUser
    September 19, 2014
    Yes. There have been a lot of posts about special characters in names, and their treatment in GUI and CLI which may differ sometimes. Best you get rid of spaces in names. You can change these in the CLI but you have to quote the name, like this: config firewall address rename " name with space" to NameWithSpace Note the " to" which you must not omit!
    Georges_Orwell
    New Member
    September 22, 2014
    Hi everybody I removed space and other special character from my objects and retryed but the problem still present. Any other idea? Thanks for your help
    ede_pfau
    SuperUser
    SuperUser
    September 22, 2014
    Reboot and retry?
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!