Explorer III

Solved

SSL-VPN Web Portal breaks after 7.4.8 upgrade on 2GB models

Forum|Forum|1 year ago
June 2, 2025
37 replies
26043 views

Hi there,

On entry-level FortiGate models, the SSL-VPN web portal breaks after the update to FortiOS 7.4.8.

Screenshot 2025-06-02 093610.png

Update 2

diagnose debug console timestamp enable
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug enable

2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/rmt_index.html, /data/migadmin, /migadmin 2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed. 2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/sslvpn/css/ssl_style.css, /data/migadmin/sslvpn/css, /migadmin/sslvpn/css 2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed.

Update 3

The issue has been identified as BUG ID 1164811: https://docs.fortinet.com/document/fortigate/7.4.8/fortios-release-notes/236526/known-issues

Best answer by heljag

This has been fixed on 7.4.9 - https://docs.fortinet.com/document/fortigate/7.4.9/fortios-release-notes/289806/resolved-issues#:~:text=with%20empty%20value.-,1164811,-SSL%20VPN%20web

Show previous replies

BillH_FTNT

Staff

Hi All,

If you're experiencing issues with SSL VPN in web mode on version 7.4.8, please feel free to collect the following data using the commands below and share it with me.

1. Collect vpn data
diagnose vpn ssl statistics
diagnose vpn ssl mux-stat
diagnose vpn ssl list
execute vpn sslvpn list

2. Collect Debug data
diagnose debug console timestamp enable
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug enable

I’m Bill from Fortinet. You can send the information to my email: bhoang@fortinet.com

In @GerryU case;

We’ve already had an internal ticket for the Engineering team. The issue is currently being processed, and we’ll provide you with an update soon. Many thanks!

Regards

Bill

Rino_BAuthor

Explorer III

diagnose debug console timestamp enable
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug enable

2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/rmt_index.html, /data/migadmin, /migadmin 2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed. 2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/sslvpn/css/ssl_style.css, /data/migadmin/sslvpn/css, /migadmin/sslvpn/css 2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed.

Lennart

Visitor III

Same as mine, the files don't exist. I was trying to compare to 7.4.7, but then i ran into issue #2, which I'm guessing is going to need a console cable connected. Below example of ssl_style.css missing. Screenshot 2025-06-05 103749.png

BillH_FTNT

Staff

Thank you, Rino_B and Lennart, for the logs and information. Your cases seem to match internal ticket #1164811. The Engineering team is currently working on it, and I’ll provide you with an update soon. Thanks again

Bill

Tune_82

New Member

I am experiencing exactly the same issue on 60F after scheduled upgrade to 7.4.8.

Joining this topic to follow progress.

macolinob

New Member

We have this issue, but it is on a 2200E, then downgraded to 7.4.7 and we still have the issue.

Update: So, this was not the same issue. The issue was that we upgraded to 7.4.8 from 7.4.7 and we have SSL Web VPN with MFA. When we tested after the upgrade SSO was not working, gave "Permission Denied". In my haste I grouped access denied in the same category. So, we downgraded, and the error persisted. The issue was that we did not have profiles for the SSO groups, but we didn't have them in the first place when we were on 7.4.7. Very weird, and sorry I should have read more clearly the error on this page.