New Member

Question

win11 + fortiToken + forticlient VPN

Forum|Forum|2 years ago
June 29, 2024
7 replies
2221 views

hi,

hope all fine.

im using win 11 with all latest update.

i was using forticlient VPN so far with no prob.

recently my compnay enabled 2fa FortiToken for remote work.

but when i try login, it stuck at 48 and entring token not show up.

have no idea wts goin on.

appreciated if u can help me.

ozkanaltas

Valued Contributor III

Hello @Mashhadi ,

Did you activate your FortiToken on your mobile phone?

If your web ssl-vpn portal is activated, you can try that. If you can connect successfully with a web vpn, your machine is problematic. But if you can't connect to web ssl-vpn, your IT team needs to review your account settings.

If stuck on %48, generally this is related to an untrusted certificate. Did you make any changes to your vpn configuration on your client?

Also, you can contact your IT team, they can diagnose the problem. For this error, also need to inspect firewall debug logs.

MashhadiAuthor

New Member

@ozkanaltas
ye fortitoken on mobile is activated,

we tested on other pc with same user pass and it worked.

i didnt change anything, actually vpn conect without 2fa, but when 2fa activated its not workin.

ozkanaltas

Valued Contributor III

Hello @Mashhadi ,

Thats intersting, normally FortiToken not affect anything. But you can try these. First, you can remove your vpn configuration and reconfigure again. If it not working, you can remove forticlient and reinstall with newer version.

hbac

Staff

Hi @Mashhadi,

You need to collect SSLVPN debugs on the FortiGate to see what's going on. Please refer to this article: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SSL-VPN-Troubleshooting/ta-p/189542

Regards,

MashhadiAuthor

New Member

@hbac
thx man, so i ask tech team to do all these ?

cuz im just user.

other ways we can think?

Sheikh

Staff

Hello @Mashhadi

Generally, logs can give more details, but it looks like the issue revolves around that PC and might be because of the certificate. Enabling these debugs on FortiGate could also help in isolating this issue.

diagnose debug reset

diagnose debug cons time en
diag debug application fnbamd -1
diagnose debug app sslvpn -1

diagnose debug enable

regards,

Sheikh

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.

Sign up

Login with SSO

Login to the community

Login with SSO