Disabling SSLv3 renders Android FortiClient (both) unusable

Rainer_Stumbaum · ‎10-16-2014

Hi, FortiGuard recommends disabling SSLv3 (http://www.fortiguard.com/advisory/SSL-v3--POODLE--Vulnerability/ ). Our Windows FortiClient works fine after a reboot of the Fortigates and restart of the FortiClient, but the Android Apps (both " FortiClient" and " FortiClient VPN" ) are not connecting and give the error message " SETUPTUNNELFAILED" . Can anyone confirm? Thanks Rainer

FGT620B Active-Passive Cluster (v4.0,build0689,140731 (MR3 Patch 18)) FGT80C Active-Passive Cluster (v4.0,build0689,140731 (MR3 Patch 18)) FAP220B (FAP22B-v5.0-build075)

Christopher_McMullan · ‎10-16-2014

There is a bug discussing this issue internally. It is a known issue at this point.

Regards, Chris McMullan Fortinet Ottawa

Rainer_Stumbaum · ‎10-16-2014

SSLv3 should have been disabled by default a long time ago...

FGT620B Active-Passive Cluster (v4.0,build0689,140731 (MR3 Patch 18)) FGT80C Active-Passive Cluster (v4.0,build0689,140731 (MR3 Patch 18)) FAP220B (FAP22B-v5.0-build075)

Rainer_Stumbaum · ‎10-16-2014

And funny enough: The reply in the forum is already there - in the ticket system no response yet (1237337)

FGT620B Active-Passive Cluster (v4.0,build0689,140731 (MR3 Patch 18)) FGT80C Active-Passive Cluster (v4.0,build0689,140731 (MR3 Patch 18)) FAP220B (FAP22B-v5.0-build075)