Technical Tip: VPN Server may be unreachable (-14)

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 203864

Description

This article describes that while accessing a VPN few users are getting the error 'VPN Server may be unreachable (-14)'.

Scope

FortiOS.

Solution

A few users are facing issues while connecting to a VPN and getting the error 'VPN Server may be unreachable (-14)'.

Host check verifies whether the user device has AntiVirus, firewall, both, or other custom security software enabled on the Windows device. If the 'Host Check' option is enabled in config SSL VPN configuration on the FortiGate. (SSL VPN Portals -> Tunnel Mode -> Host Check) then this error will show if the host is not complying with the host check settings.

host check option edit.PNG

To disable it with CLI :

config vpn ssl web portal
edit "tunnel-access"
set host-check none
next
end

62573

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.