FortiOs 6.4.4 unable to active DTLS ssl vpn

[AlexBeaudet]

Hi all,

I have a single user (out of 30 testers) for our new SSL VPN config which is having awful performance on his Windows 10 machine. Terrible pings to his workstation, unusable RDP and file transfer is not starting or stuck at an ultra low transfer speed.

So after ready a bit I tried setting up the DTLS tunnel to troubleshoot.  The problem is that after running the command on my fortigate the settings doesn't stick!

config vpn ssl settings     set dtls-tunnel enable end

running "show" after running the config doesn't list "set dtls-tunnel enable" and thus the client, with Preferred DTLS tunnel activated, is stuck at 98% and doesn't connect.

Bug in 6.4.4?  If anyone has seen or corrected this! thank you

[apex]

Hi, 

dtls is enabled by default under ssl vpn and that's the reason for not appearing under 'show' command.

Run 'show full-configuration' instead.

thanks

[emnoc]

OP you need to use the "full" option 

e.g 

SOMASFCA0101A # show full vpn  ssl settings | grep dtls    set dtls-hello-timeout 10    set dtls-tunnel enable    set dtls-max-proto-ver dtls1-2    set dtls-min-proto-ver dtls1-0