FTM provision error: problem with SSL comm layer: server connection failed: SSL session failed

[SWH]

Hallo,

I get the following error when I provide a Forti Mobile Token to a user:

"FTM provision error: problem with SSL comm layer: server connection failed: SSL session failed"

nslookup fortitokenmobile.fortinet.com

the Authenticator can address the Fortimobile server.

That's the only suggestion I can find for this error, but it works and is obviously not my problem!

Any other hints to the error?
AuAuthenticator Vesion:

Firmware Version 6.6.2 build 1669 (GA)

i tried different Mobile Tokenss, same error.

Greetings Andree

[rbraha]

Hi Andree,

Check if there is any firewall policies doing any deep inspection towards FAC traffic, make sure that FAC has internet reachability.

[SWH]

Hi rbraha
Thanks for the quick reply!
It was the firewall, I had created a corresponding rule without ssl inspection, but it came after the catch all policy for internet access.
Moved the rule before that, now it works.

Best regards and Merry Christmas