Skip to main content
bobm
bobm
New Member
December 3, 2015
Question

Local Users unable to Connect

  • December 3, 2015
  • 8 replies
  • 12917 views

We're running a 90D with 5.0 FW.  All users are local, and prompted to log in daily.  In the past several months, various users are randomly unable to connect.  When they open their browser (both IE and Firefox), instead of a prompt or even Cert Error, they just receive generic "can't connect to the website" errors from their browser. They can connect to White List sites, but going to any sites that are part of Web Filtering the traffic just gets blocked. I can connect to the FG GUI and even log in using my credentials, but no traffic passes through except to White List websites.  Sometimes it resolves itself over a few minutes, sometimes a reboot of the PC helps, other times I have to assign a static IP that is configured to bypass the login altogether.

 

Has anyone come across this?  Thanks

    8 replies

    emnoc
    emnoc
    New Member
    December 3, 2015

    You should use diag debug flow for 1st diagnostic and to ensure your hitting the policies that you think your hitting.

     

     

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    December 4, 2015

    Please check that in case the Fortiguard servers are unavailable the Web Filter will pass "uncategorized" sites and not block them (which is the default). You find the checkbox for this in the WF setup.

     

    IMHO you should also upgrade to v5.0.12 from any older version. This one is really stable. Upgrading will most probably not solve your issue but it might prevent other issues.

    bobm
    bobmAuthor
    New Member
    December 4, 2015

    I will try to schedule a FW update soon.  We're on build 9 right now. 

     

    As far as other testing, the issue that confuses me is that it's not a universal problem. On any given day, out of about 40 users, 38 or 39 will be able to connect without a problem and be under all the correct policies.  On those days, it's just one or two random users that have issues.

     

    It's not that they are being blocked from certain sites, it's that the login prompt is not even being given to them in the first place.  The error they are seeing is that they have no internet connection at all.

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!