FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kltam
Staff
Staff
Article Id 408399
Description This article describes OCVPN errors in FortiGate when OCVPN is disabled. It provides a step-by-step workaround to fix the issue and prevent future occurrences.
Scope FortiGate v7.x.
Solution
  1. Some OCVPN errors might appear in some FortiGate devices even though the OCVPN feature is disabled on the device.

Example of the OCVPN Event logs:

 

Picture1.png

 

  1. The configuration option 'ha-alias' appeared in the logs, although this option had been removed since FortiOS v7.0.x.

  2. The trigger is unknown, but the workaround below can be used to remediate the issue:

 

config vpn ocvpn
    unset ha-alias
end

 

  1. If the issue persists, contact Fortinet support for further investigation.