Skip to main content
AlexBeaudet
AlexBeaudet
New Member
January 21, 2021
Question

FortiOs 6.4.4 unable to active DTLS ssl vpn

  • January 21, 2021
  • 2 replies
  • 5334 views

Hi all,

 

I have a single user (out of 30 testers) for our new SSL VPN config which is having awful performance on his Windows 10 machine. Terrible pings to his workstation, unusable RDP and file transfer is not starting or stuck at an ultra low transfer speed.

 

So after ready a bit I tried setting up the DTLS tunnel to troubleshoot.  The problem is that after running the command on my fortigate the settings doesn't stick!

 

config vpn ssl settings     set dtls-tunnel enable end

 

running "show" after running the config doesn't list "set dtls-tunnel enable" and thus the client, with Preferred DTLS tunnel activated, is stuck at 98% and doesn't connect.

 

Bug in 6.4.4?  If anyone has seen or corrected this! thank you

    2 replies

    apex
    apex
    New Member
    August 20, 2021

    Hi, 

    dtls is enabled by default under ssl vpn and that's the reason for not appearing under 'show' command.

    Run 'show full-configuration' instead.

     

    thanks

    emnoc
    emnoc
    New Member
    August 20, 2021

    OP you need to use the "full" option 

     

    e.g 

     

    SOMASFCA0101A # show full vpn  ssl settings | grep dtls

        set dtls-hello-timeout 10

        set dtls-tunnel enable

        set dtls-max-proto-ver dtls1-2

        set dtls-min-proto-ver dtls1-0

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.