FortiClient Unable to SSLVPN

[LeidosConnect]

Hello, my FortiGate 2000E is not letting a FortiClient connect today (worked yesterday)

I put the FG into debug mode, got this when the user failed:

Destroy sconn 0x7f7dd367d800, connSize=2. (root) SSL_accept failed, 5:(null) Destroy sconn 0x7f7dd3551400, connSize=3. (root)

What do I do to fix this? LG

[Raff]

Hello,

Have you found a sollution? I have the same problem ;(

[pminarik]

Hi,

If I remember correctly(!), Windows checks internet connectivity by trying to resolve the domain "www.msftncsi.com" and then trying to open http://www.msftncsi.com/ncsi.txt . The expected result is a plain text saying "Microsoft NCSI".

Please check if your clients have the ability to resolve and open this. If not, then troubleshoot the individual elements of the chain. (DNS resolution and potentially DNS filtering, routing (split? full?), any sort of web-filtering applied?, firewall policy allowing this, etc.)

[pminarik]

[deleted]