FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
jdelafuente_FTNT
Article Id 248143
Description

 

This article describes an incompatibility issue between Forticlient VPN SSL and Microsoft RSAT.

 

Scope

 

FortiGate, SSL VPN.

 

Solution

 

When the FortiClient connects to SSL VPN and GUI shows connection information with the IP address from VPN SSL pool successful but there is no communication, one possible cause is Forticlient's Virtual Ethernet Adapter is not loading addressing correctly.

 

Note:

This issue occurs commonly in Windows 11.

 

Anthony_E_0-1678686186706.png

 

Forticlient's GUI shows the IP address and Virtual Ethernet Adapter without addressing.

 

Anthony_E_1-1678686253638.png

 

ipconfig command shows NO IP assigned.

 

Check if Microsoft's update KB2693643 is installed:

  1. In the Windows system, select Start -> All Apps -> Windows System -Control Panel. Or 'Right-click' in Start -> Run then write 'control' and enter.
  2. If the view is 'Category', under Programs, select Uninstall a program. Otherwise, if the view is 'large/small Icons' then select Programs and Features.
  3. Select View installed updates.
  4. Validate if the Update for Microsoft Windows (KB2693643), is installed in the system.

 

To uninstall RSAT for Windows 11:

  1. On the desktop, select Start, select All Apps, select Windows System, and then, select Control Panel.
  2. Under Programs, select Uninstall a program.
  3. Select View installed updates.
  4. Right-click and choose Update for Microsoft Windows (KB2693643), and then select Uninstall.
  5. Select Yes to confirm.
  6. A reboot may be required.

Follow the steps in this Microsoft document to uninstall Microsoft RSAT.

 

It is also possible to uninstall the update with the following command in a command prompt with admin privileges:

 

wusa /uninstall /kb:2693643

 

Solution 2

 

Application 'netsh.exe' is causing the issue: the incompatible netsh helper DLL was from the older Windows 10 RSAT tools. Try to uninstall it and use the native Win11 RSAT tools.