Skip to main content
AlexBeaudet
AlexBeaudet
New Member
January 21, 2021
Question

FortiOs 6.4.4 unable to active DTLS ssl vpn

  • January 21, 2021
  • 1 reply
  • 5297 views

Hi all,

 

I have a single user (out of 30 testers) for our new SSL VPN config which is having awful performance on his Windows 10 machine. Terrible pings to his workstation, unusable RDP and file transfer is not starting or stuck at an ultra low transfer speed.

 

So after ready a bit I tried setting up the DTLS tunnel to troubleshoot.  The problem is that after running the command on my fortigate the settings doesn't stick!

 

config vpn ssl settings     set dtls-tunnel enable end

 

running "show" after running the config doesn't list "set dtls-tunnel enable" and thus the client, with Preferred DTLS tunnel activated, is stuck at 98% and doesn't connect.

 

Bug in 6.4.4?  If anyone has seen or corrected this! thank you

    1 reply

    apex
    apex
    New Member
    August 20, 2021

    Hi, 

    dtls is enabled by default under ssl vpn and that's the reason for not appearing under 'show' command.

    Run 'show full-configuration' instead.

     

    thanks

    emnoc
    emnoc
    New Member
    August 20, 2021

    OP you need to use the "full" option 

     

    e.g 

     

    SOMASFCA0101A # show full vpn  ssl settings | grep dtls

        set dtls-hello-timeout 10

        set dtls-tunnel enable

        set dtls-max-proto-ver dtls1-2

        set dtls-min-proto-ver dtls1-0

    Terms & ConditionsCookie settingsAccessibility statement