TLS Mismatch Error after 20H2 upgrade

Forum|Forum|5 years ago
July 21, 2021
2 replies
2518 views

Hey, this is a weird one (or not)

Now I am a desktop engineer so no access to the fortinet servers but can get someone who can if need be.

I'm testing upgrading clients from 1909 - 20H2. I have two laptop models HP g3 and HP g4.

HP G4 upgrades and I can connect to fortinet VPN fine.

HP G3 upgrades and will not connect with the following errors -

First attempt:

The Server you want to connect to requests identification - please choose cert and try again (-5029)

Second attempt:

Failed to establish the VPN connection - This may be caused by a mismatch in the TLS version. Check TLS version in Advanced of Internet Options

Both models have exactly the same configuration from an OS side and worked prior to upgrade so possibly something hardware related? I have tried rolling back to older WIFI drivers but no luck.

Any thoughts appreciated.

Kush_Patel

Staff

You can give this a shot to see if it changes the behavior :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Forticlient-TLS-error-5029-failed-to-establish-the/ta-p/190478

parteeksharma

Staff

Hi DPAUL1,

Please check the SSL version on PC and verify the ssl settings on Fortigate as well
To check ssl settings on PC, use below path:
Internet explorer -> Settings -> Internet options -> Advanced, scroll down and check the TLS version.

Also verify on Fortigate the ssl version settings configured, under below hierarchy:
config vpn ssl settings
sh full
end

Regards,
Parteek

Sign up

Login with SSO

Login to the community

Login with SSO