Troubleshooting Tip: VPN SSL connected but no IP address in Virtual Ethernet Adapter

[jdelafuente_FTNT]

Description

This article describes an incompatibility issue between FortiClient VPN SSL and Microsoft RSAT.

Scope

FortiGate, SSL VPN.

Solution

When the FortiClient connects to SSL VPN and GUI shows connection information with the IP address from VPN SSL pool successful but there is no communication, one possible cause is Forticlient's Virtual Ethernet Adapter is not loading addressing correctly.

Note:

This issue occurs commonly in Windows 11.

Forticlient's GUI shows the IP address and Virtual Ethernet Adapter without addressing.

ipconfig command shows NO IP assigned.

Also another possible symptom is when checking the FortiClient logs, the debug shows a message similar as 'Did not find interface for local_gwy'.

Check if Microsoft's update KB2693643 is installed:

1. In the Windows system, select Start -> All Apps -> Windows System -> Control Panel. Or 'Right-click' in Start -> Run then write 'control' and enter.
2. If the view is 'Category', under Programs, select Uninstall a program. Otherwise, if the view is 'large/small Icons' then select Programs and Features.
3. Select View installed updates.
4. Validate if the Update for Microsoft Windows (KB2693643), is installed in the system.

It is also possible to check by running the following command in PowerShell: get-hotfix KB2693643
Here is the output if that update is installed on the system:

To uninstall RSAT for Windows 11:

1. On the desktop, select Start, select All Apps, select Windows System, and then, select Control Panel.
2. Under Programs, select Uninstall a program.
3. Select View installed updates.
4. Right-click and choose Update for Microsoft Windows (KB2693643), and then select Uninstall.
5. Select Yes to confirm.
6. A reboot may be required.

Follow the steps in this Microsoft document to uninstall Microsoft RSAT.

It is also possible to uninstall the update with the following command in a command prompt with admin privileges:

wusa /uninstall /kb:2693643

Solution 2:

Application 'netsh.exe' is causing the issue: the incompatible netsh helper DLL was from the older Windows 10 RSAT tools. Try to uninstall it and use the native Win11 RSAT tools.