VPN connection failed

Hi @Pi007 ,

Since you sau that one of your users has issues, I assume that the others are able to connect. If it is the case, that means that it is less likely to be a FortiGate configuration issue.  If the users that are abble to connect use the same FortiClient version, that would rule out the FortiClient also and would narrow it down to the host itself. If there is an anti-virus software installed, can you try with it disabled?

Also, to get an ideea of what is going on, run this commands on the FortiGate while trying to connect:

diagnose debug reset
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug enable

HI Aionescu,

I have checked the configuration of the client setup and it is a carbon copy of how mine is and i have no problem connecting to the VPN with mine or the users details. 

Please note i only have access to the FortiClinet VPN software on the users computer to troubleshoot so will not be able to run the debug commands. 

Can you remove the VPN client using FCRemove tool, then reboot re-install the client, and check?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-download-FortiClient-and-FCRemove-exe-from/ta-p/218955
https://community.fortinet.com/t5/FortiClient/Technical-Tip-Uninstall-of-FortiClient-software/ta-p/191604?externalID=FD40369

Hi Vsahu,

Many thanks for the reply, i will give the FCRemove tool a go and see if that helps. I have a remote session booked in for later today so will update once i have been on the computer. 

Afternoon,

I have found the below from the sslvpndaemon_1 trace under logs 

[sslvpndaemon 515 debug] FortiSslvpn: _ReceiveMessage: (00000384)

 [8244:13320] [sslvpndaemon 515 debug] FortiSslvpn: Init:ConnectNamedPipe(): Wait(hEventOverLapped) OK.

[8244:13320] [sslvpndaemon 515 debug] FortiSslvpn: before ConnectNamedPipe

 [8244:13320] [sslvpndaemon 515 debug] FortiSslvpn: Init:ConnectNamedPipe(): rc=0, err=997

 [8244:888] [sslvpndaemon 515 debug] FortiSslvpn: _ReceiveMessage: (00000344)

 [8244:888] [sslvpndaemon 515 debug] FortiSslvpn: Broken pipe! Client is exited (3).

Does anyone know what this would point to?

Hello,

Can you confirm if are you able to connect using the browser to the same SSL URL or not from the same machine?

Also, have you tested with FCRemove tool?

Also, can you confirm which device the user is using the machine hardware and OS?
There was one issue I was able to find in which the dell optimizer application was causing similar behavior with forticlient.

Hi Vsahu,

i was unable to download the FCRemove tool as i have no devices resisted in the website. When i went to firmware downloads that is where it stopped for me. 

Details of the device it is a Dell laptop with Windows 10 vers 21h2 installed. We do not have a SSL URL on the client setup, we use an IP address for the remote gateway.

Hello Pi007,
can you check on the machine if the dell optimizer application is running or not? If yes please uninstall it and check.

Also, I'll suggest registering one of the devices to get the FCRemove tool, so you can uninstall the Forticlient completely from the device and test with the new installation.

Hi Vsahu,

dell optimizer was not installed on the computer. 

I used the FCRemove tool and this did not fix the problem. 

Once reinstalled i get the same error.