Troubleshooting Tip: TLS Cipher Suites in Windows

[ctanev1]

Description	This article describes how to troubleshoot SSL-VPN issue with TLS Cipher Suites in Windows.
Scope	SSL VPN.
Solution	When troubleshooting SSL VPN issues with TLS Cipher Suites in Windows first, it is necessary to check that TLS Cipher Suites are configured in FortiGate. For example from FortiGate config SSL-VPN settings: set ciphersuite TLS-CHACHA20-POLY1305-SHA256 Microsoft info indicates Cipher Suites are not available in Windows 10. However, they are available in Windows 11, as indicated in this Microsoft article . Recommendations: Only Windows 11 is used with these Cipher Suites. Other Cipher Suites are available in all FortiOS versions for configuration. For more details on the cipher suite, see Technical Tip: Understanding the cipher suite 1.2 supported by Fortinet devices.