SSL VPN Host Check Interval Error

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 311512

Description

This article describes how to resolve the host-check interval error displayed after enabling the host-check feature in the SSL VPN Portal.

Scope

FortiGate.

Solution

This issue may be encountered when trying to configure and apply the Host Check feature through SSL VPN Portals:

When testing on v7.4.3 with web mode disabled by default, the message above indicates the web-mode is disabled in the global settings.

config system global

show full | grep sslvpn-web-mode

set sslvpn-web-mode disable

set sslvpn-web-mode enable

end

Next, set the host check interval value to a number within the expected range:

config vpn ssl web portal

edit "full-access"

set host-check-interval 120

end

Now, navigate to the SSL VPN portal and apply the host check.

Note:

It may be necessary to refresh the page first.

To do not set the interval values, it is possible to disable it from CLI directly:

config VPN SSL web portal
edit <SSL VPN portal>
unset host-check
end

2911

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Troubleshooting Tip: SSL VPN Host Check Interval Error

You are leaving our website