Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

New Contributor

Fortigate 200D gives multiple external IP addresses to one client

After upgrading my Fortigate 200D to firmware version 6.0.14 build 0457(GA) the device started handing out multiple IP addresses to one client using SSL Vpn. Users have been given up to 10+ ip addresses at times. Users should only be given 1 IP address. I reported this to Fortinet Support but they couldn't provide an answer. Anyone has any ideas on this?



Even though this post is already a year old ...


You might be matching a known issue 745499 resolved in FortiOS 6.0.15.

Refer to the release notes


Bug ID



In cases where a user is establishing two tunnel connections, there is a chance that the second session knocks out the first session before it is updated, which causes a session leak.


This can lead to multiple IPs being assigned to one endpoint.

And eventually the IP pool to be used up.


workaround are:

# execute vpn sslvpn list > exe vpn sslvpn del-tunnel <missing index
# execute vpn sslvpn del-al


If you are still reading this then please reply back to confirm the issue got resolved after upgrading to the latest 6.0. release which is currently 6.0.16.