Skip to main content
hchara
New Member
April 15, 2021
Solved

VPN SSL CONNECTION INSTABILITY (with forticlient)

  • April 15, 2021
  • 1 reply
  • 3172 views

Hello,

 

Our customer complains of recurring ssl vpn outage, this impacts several users. I enclose the forticlient logs sent by the user, the day the cut occurred (03/30/2021). For information, the users of this customer connect with AD authentication in vpn ssl.

Do you have any troubleshoot ideas? Because these are random cuts, and it does not happen at the same time for everyone.

Thank you for your help.

Best Regards

Hanane

    Best answer by Toshi_Esumi

    First, separate login/establishment problem from unexpected disconnect in the middle of sessions. If the latter, authentication has nothing to with the problem. I assume the latter.

    Then, likely something happened to the FGT's interface and/or the circuit connected to it if multiple users got disconnected at the same time. Check "get vpn ssl monitor" to see how many or all got disconnected and needed to reconnect after that. You need to do that right after the problem was reported. That would give you some hints what might have happened. And then check the log if circuit/interface has bounced or something else happened at that time.

    1 reply

    Toshi_Esumi
    SuperUser
    SuperUser
    April 15, 2021

    First, separate login/establishment problem from unexpected disconnect in the middle of sessions. If the latter, authentication has nothing to with the problem. I assume the latter.

    Then, likely something happened to the FGT's interface and/or the circuit connected to it if multiple users got disconnected at the same time. Check "get vpn ssl monitor" to see how many or all got disconnected and needed to reconnect after that. You need to do that right after the problem was reported. That would give you some hints what might have happened. And then check the log if circuit/interface has bounced or something else happened at that time.

    hchara
    hcharaAuthor
    New Member
    April 16, 2021

    Hi,

     

    Thank you for this replay.

    I will check that with customer.

     

    Regards