Description
This article describes how to connect to SSL VPN when the status gets stuck at 40%.
Scope
FortiGate.
Solution
The SSL VPN sometimes gets stuck at 40%. This can be caused when the FortiClient opens a new window in the back asking to proceed as the certificate is untrusted as per the following:
After selecting 'yes', the connection will proceed normally.
This can also be caused by an expired custom server certificate on the FortiGate. As a workaround, choose the Fortinet_Factory certificate while waiting for certificate renewal from the CA.
Note: A special case where sslvpn stops at 40% can be a missing configuration on the FortiGate side, especially a firewall policy where the ssl.root is the source interface, similar to the image below:
