Technical Tip: Debugging SSL VPN Using TVC on Fort...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 364402

Description

This article explains the role of TVC (Tunnel Virtual Connection) in SSL VPN debugging on FortiGate.

Scope

FortiGate.

Solution

TVC refers to the SSL VPN client connection process on FortiGate. Debugging TVC helps diagnose issues in tunnel establishment, focusing on communication and negotiation between the FortiGate and the client.

diagnose debug application tvc -1

diagnose debug application sslvpn -1
diagnose debug enable

Enables detailed logs for the SSL VPN client (TVC). This command will help to identify issues such as:

Connection negotiation failures, tunnel establishment errors, and configuration mismatches or certificate problems.
Apply filters like 'diagnose vpn ssl debug-filter src-addr4 <IP>' to focus on specific client issues.
Disable debugging with 'diagnose debug disable' after collecting logs.

194

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Debugging SSL VPN Using TVC on FortiGate