Skip to main content
StefanBu
New Member
December 10, 2020
Question

VPN split tunnel problem (after FW update)

  • December 10, 2020
  • 5 replies
  • 7083 views

Hello, we have a FG100D and since the latest fw-update to 6.2.6 we have strange problem with our SSL-VPN connection. Everything seems to work except Outlook. Outlook (versions from 2010 - 365) connects to our Exchange 2010 server. With some users it works without any problems. With others it simply stops working - then an error message like this appears - no connection... Folders cannot be loaded... and Outlook does not open, or Outlook opens and there is 'No connection...' in the bottom right corner

But after a few hours it suddenly works again - same users, without intervention. A connection to OutlookWebApp is always possible, in all cases. The VPN is configuered in the following way:

The split tunneling works well. But the Outlook error drives me crazy.

Has anyone an idea? Or can anyone help?

kind regards

    5 replies

    Philippe_Gagne
    New Member
    December 10, 2020

    Hi,

     

    There is an issue with IPSec VPN in the version 6.2.6. Workaround I know: upgrade to 6.4.3 or reboot in the last version you used (change boot flag - see "exec set-next-reboot" command).

     

    https://docs.fortinet.com/document/fortigate/6.2.6/fortios-release-notes/236526/known-issues

    BugID 668554 and 610203.

     

    Regards,

     

    Philippe

     

    StefanBu
    StefanBuAuthor
    New Member
    December 11, 2020

    Thank you for your tipps.

    We have a FG100D - the 6.4.x Software is not approved for the 'D' Version.

    And also we have a problem with SSLVPN, not IPSEC - but as far as I can see there are also bugs in the SSLVPN, so I will go backwards in firmware and hope it will fix this annoying matter

    StefanBu
    StefanBuAuthor
    New Member
    December 11, 2020

    did a downgrade to 6.2.2 - issue seems to be gone

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!