Description
This article describes an incompatibility issue between Forticlient VPN SSL and Microsoft RSAT.
Scope
FortiGate, SSL VPN.
Solution
When the FortiClient connects to SSL VPN and GUI shows connection information with the IP address from VPN SSL pool successful but there is no communication, one possible cause is Forticlient's Virtual Ethernet Adapter is not loading addressing correctly.
Note:
This issue occurs commonly in Windows 11.
Forticlient's GUI shows the IP address and Virtual Ethernet Adapter without addressing.
ipconfig command shows NO IP assigned.
Check if Microsoft's update KB2693643 is installed:
- In the Windows system, select Start -> All Apps -> Windows System -> Control Panel. Or 'Right-click' in Start -> Run then write 'control' and enter.
- If the view is 'Category', under Programs, select Uninstall a program. Otherwise, if the view is 'large/small Icons' then select Programs and Features.
- Select View installed updates.
- Validate if the Update for Microsoft Windows (KB2693643), is installed in the system.
To uninstall RSAT for Windows 11:
- On the desktop, select Start, select All Apps, select Windows System, and then, select Control Panel.
- Under Programs, select Uninstall a program.
- Select View installed updates.
- Right-click and choose Update for Microsoft Windows (KB2693643), and then select Uninstall.
- Select Yes to confirm.
- A reboot may be required.
Follow the steps in this Microsoft document to uninstall Microsoft RSAT.
It is also possible to uninstall the update with the following command in a command prompt with admin privileges:
wusa /uninstall /kb:2693643
Solution 2
Application 'netsh.exe' is causing the issue: the incompatible netsh helper DLL was from the older Windows 10 RSAT tools. Try to uninstall it and use the native Win11 RSAT tools.
