FortiClient v6.0.0 IPSEC VPN not connecting

[DVFIT]

Our users are sporadically able to connect to VPN. They enter their username and password and click "Connect", then they get the box to enter their 2-factor code. Once they click on "Ok", the boxes get greyed out and there's nothing to do but click "Disconnect", and it just sits there until you click "Disconnect".  We went from v5.6.6 to 6.0.0, deployed from EMS on v6. The vpn config worked on 5.6.6, but we're lucky if 25% of our users can connect now that we've deployed v6.

Any ideas?

[makco10]

Hello,

In the logs you see anything about this connection?

You can debug to obtain more info about:

To enable and use IKE real-time debug 

1. Create a filter using the following command:

diagnose vpn ike log-filter dst-addr4 <|Psec peer's public IP address> 

2. Enable the debug using the following commands:

diagnose debug application ike -1

diagnose debug enable 

3. Try to open the tunnel while the debug is running, and capture all the output

4. After you have captured the output, stop the debug using the following commands:

diagnose debug reset 

diagnose debug disable  

[style="background-color: #ffff99;"]Keeping a real-time debug running on the background of a FortiGate for a long time is not recommended.[/style]