Troubleshooting Tip: FortiClient VPN to internal network

[Marcos_Hernandez]

Description	This article describes how to disable Internet validation when the VPN is established with a peer on the internal network and Internet access is not required. Log for reference: [FortiVPN 957 debug] => fortivpn::StateMachine::HandlePreflight_EnvironmentCompliance(VPN_Local_Principal_TAC) [FortiVPN 654 debug] fortivpn::IDataManager_impl::UpdateNetworkAvailability lockdown=0 lockedFlag=0 [FortiVPN 36 debug] fortivpn::INetworkAvailability_impl::Get NLM_CONNECTIVITY state = 0x22 [FortiVPN 42 debug] fortivpn::INetworkAvailability_impl::Get LAN is available, Internet is not available [FortiVPN 141 debug] fortivpn::IDataManager::LoadVPNEnvironmentalData [FortiVPN 299 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN [FortiVPN 306 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN pInfo->m_nConnectionState=2 pInfo->m_CurrentSSLVPNStatusCode=1 [FortiVPN 309 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN stSslvpn.status=0 [FortiVPN 317 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN stSslvpn.status=0 [FortiVPN 595 debug] fortivpn::IDataManager_impl::LoadVPNEnvironmentalData [FortiVPN 146 debug] fortivpn::IDataManager::LoadVPNEnvironmentalData Leave [FortiVPN 229 debug] fortivpn::IDataManager::GetActiveVPNSession [FortiVPN 299 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN [FortiVPN 306 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN pInfo->m_nConnectionState=1 pInfo->m_CurrentSSLVPNStatusCode=1 [12924:10252] [FortiVPN 309 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN stSslvpn.status=0 [12924:10252] [FortiVPN 317 debug] fortivpn::ISSLVPNMonitoring_impl::getRunningVPN stSslvpn.status=0 [FortiVPN 280 debug] fortivpn::IDataManager::GetActiveVPNSession Leave [FortiVPN 985 debug] fortivpn::StateMachine::HandlePreflight_EnvironmentCompliance {"session":{"id":0,"id_name":"","name":"","domain":"","session_type":0,"vpn_session_type":-1,"has_wts_session_logon":false,"has_wts_session_lock":false,"auto_connect_permitted":false, "keep_running_permitted":false,"manually_disconnected":false,"vpn_interrupted":false,"disconnection_reason":0,... [FortiVPN 994 warning] fortivpn::StateMachine::HandlePreflight_EnvironmentCompliance environment does not permit VPN connections: No Internet. [FortiVPN 106 debug] In state: TunnelConnectAborted
Scope	FortiClient, FortiEMS.
Solution	Go to: Endpoint profiles -> Remote Access -> Select the desired profile 'Edit' -> Select XML.                                                                                             Then Select 'Edit'.                                                                                                                 Scroll down until the 'options' section and find <disable_internet_check> item. Change the value from 0 to 1.                                                                                         Select 'Save' and wait for the next Telemetry with the FortiClient.