Skip to main content
Mike_Berube
New Member
December 8, 2010
Question

Tunnel Mode unresponsive Connect button for some users

  • December 8, 2010
  • 10 replies
  • 7452 views
Hi, I opened a ticket with FG support but they still have not found a solution to this issue. I’m wondering if somebody here has had this issue before. Some of my users click on the Connect button to initiate Tunnel Mode and it’s like the Connect button is unresponsive or dead. I don’t think it’s a group or user issue since all users are part of the same group. I’m scratching my head on why it works for some and not for others. It must be on the client side but what? Here are my version: Fortigate 200B v4.0,build0291,100824 (MR2 Patch 2) Client 4.0.2084

    10 replies

    zmag
    New Member
    December 9, 2010
    Mike, try a different browser, I have had issues with IE and have seen others with the same.
    Mike_Berube
    New Member
    December 9, 2010
    I tried Firefox but I get this error message when login on and by clicking OK I get booted out. Is there a link? The SSL-VPN Host-check Java applet cannot be loaded. Please check you have Java installed and enabled. Not sure how I do that but I’m searching. Any help would be appreciated. Mike
    Mike_Berube
    New Member
    December 9, 2010
    I reinstalled Java and it does not fix the issue. The error message is gone in Firefox but the connection does not work with IE and Firefox. The issue is on the PC and not on the server I gather since I have a PC here that I successfully connect with any user and from the problem PC' s I can' t connect no matter what user I utilize to connect. I just can' t figure out what is wrong and it looks like support is not finding any solutions either..... :\
    rwpatterson
    New Member
    December 9, 2010
    Can you find any common threads? Windows updates? Service Packs? JAVA versions? Browser versions?
    Mike_Berube
    New Member
    December 10, 2010
    Update on this issue. Support has moved me up to the next level support. No news since..... They seem baffled on what is causing this issue. They have never seen this before. Just my luck I guess. I have setup up a PC and can replicate the issue. It’s a plug in issue I’m certain. The PC is a Windows XP SP3 PC and all the updates are done on it. Otherwise nothing special. The only thing I can add is that all the PC causing the issue come from an image pushed with Acronis thus they are all the same image. Might be a SID issue!!! I’ll try changing the SID to test. Be back with that. :\
    rwpatterson
    New Member
    December 10, 2010
    Back in the day we had strange issues with cloned image PCs (Win 9x). What we found was simply deleting the IP stack and reloading it would fix most issues, and break the ' cloned SID' issues.
    Mike_Berube
    New Member
    December 14, 2010
    Me again. I reset the SID, the IP stack and installed all the Windows updates and the issue is still there. I used Filemon to create a log during the connect attempt. There’s lots of stuff in there but I have no clue what to look for. Here is the log just in case somebody here knows what he or she is looking at. Still waiting for level 2 tp call me back since last Thursday. Nothing yet. I' m out of ideas....HEEEEEELPPPPPPP!!!!!!!!!
    TopJimmy
    New Member
    December 15, 2010
    I have that problem too but only after a firewall upgrade that requires a new SSL VPN client (such as upgrading from 4.1.8 to 4.2.2) and generally only happens to Vista/Windows7 clients. The resolution for us is to remove the SSL VPN client from Programs and Features and reinstall it. Some times i' ve seen the regular FortiClient interfere and have had to not only remove the SSL VPN client but the FortiClient, reboot, then reinstall the SSL VPN first and then the regular FortiClient.
    Mike_Berube
    New Member
    December 17, 2010
    I might have found why this is happening. It looks like the SSL VPN connection is not binding. Anybody know how to force binding? I have over 20 computers with this issue and I don’t want to format every PC to fix this issue.
    Mike_Berube
    New Member
    December 17, 2010
    The Fortissl dialup connection status is at " Unavailable - device missing" !!!!!!
    Mike_Berube
    New Member
    December 21, 2010
    I think I solved it. At least it works on my test PC. Will try it on my production PC’s today. The issue with “Unavailable-Device missing” for a device is that there are no miniports installed on the PC. Most support techs that have no clue other then how there product works will often tell you that you need to format and reinstall your OS witch was the case with fortinet support. To me that’s not an acceptable answer. If reinstalling your OS will fix the issue then that means that it’s a software or configuration issue that can be repaired without the need to reinstall. Solution: I found that there were no Miniports installed on the PC. You can see if this is the case on your system by going to Control panel, system, Hardware, Device Manager, click on View, Show hidden devices. Under Network Adapters you should see a series of WAN Miniport (IP, PPPOE, PPTP….). These ports are often used for different adapters like VPN clients for example. If the Miniports are not visible you will need to reinstall them. First download devcon.exe. This is a utility from Microsoft. When that is done you can find the different miniport driver names associated to your OS in the following file c:\windows\inf\netrasa.inf. This path is for Windows XP and it will be different for other OS. Here are the command lines I used in XP to reinstall the needed Miniports. devcon.exe install c:\windows\inf\netrasa.inf MS_PppoeMiniport devcon.exe install c:\windows\inf\netrasa.inf MS_NdisWanIp devcon.exe install c:\windows\inf\netrasa.inf MS_PptpMiniport devcon.exe install c:\windows\inf\netrasa.inf MS_L2tpMiniport Reboot your PC following these commands. You will probably need to reinstall your VPN client or hardware driver that was not functioning before. This will reinitialize binding to the Miniports. This is a result of a few days works so I hope this will help somebody out there. Voila Mike
    rwpatterson
    New Member
    December 21, 2010
    Great info! This will probably save many of us HUGE volumes of time. Too bad it cannot be made sticky...
    Mike_Berube
    New Member
    December 22, 2010
    It works for most PCs. I fixed more then a dozen and still some to go. I only have a handful of user that I’m still having issues connecting but it might be related to something else.