Description
This article describes the SSL VPN issue where no certificate pop-up appears and is stuck at 40% and eventually connection goes down.
Scope
FortiClient, FortiGate, SSL VPN.
Solution
Normally when the SSL VPN connection percentage reaches 40%, it is expected a certificate pop-up.
However, in some scenarios, the certificate pop-up does not come and the VPN connection will be dropped eventually.
This could happen if configuring a well-known port as the SSL VPN port configuration.
Solution:
When these well-known ports are not used in the network, it is possible to remove them. If that well-known port is used in the network, then change the SSL VPN communication port in the SSL VPN settings of FortiGate firewall first and then change the port in FortiClient as well.
