Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
truongphan
New Contributor

Can't access web mode access SSL-VPN

I have lab on EVE-NG setup SSL-VPN when access web mode from client then I can't access web

 

Capture11.PNG

2 REPLIES 2
truongphan
New Contributor

This is topo

topo.PNG

Markus_M
Staff
Staff

Hi Truong,

 

the error says it on screen: Cipher mismatch. The FortiGate and the Browser do not speak the same security protocol and fail to negotiate a TLS/SSL tunnel.

Either your browser or FortiGate is ancient or your FortiGate is set up to not use strong-crypto or only allow older TLS versions.

On CLI you can search for it:

show | grep crypto -f

show | grep TLS -f

show | grep SSL -f

Respective options might have to be changed. A good idea to do so. Above error message only appears when one of the clients isn't speaking up-to-par encryption standards for some reason.

 

 

Best regards,

 

Markus 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors