Forticlient 7.0 error connection

[GiacomoMorelli]

H Everyone.

On my Win 10 Notebook, Forticlient stops to connect to all sites that I've configured. I altready try to disable AV, reinstall a new version but the problem is the same.
Counter arrives at 89% and the error report: Unable to establish The VPN connection. The VPN server may be unreachable. (-5052).
If I try to connect to SSL Web autentication and everything works. Also same profile Is ok using forticlient Mobile on IOS.
Does anyone already had this problem? I don't find anything with this error code (-5052).

Regards

Giacomo

[mgoswami]

Hi, 

What software version of FortiClient are you running?

Did you try to check with another version of Forticlient?

You mentioned that it's dropping at 89%. Usually, disconnection above 80% indicates that the device or client who’s causing problem. Please try to login using the same profile from another system and see if that works.

BR,

Manosh

[GiacomoMorelli]

Hi Manosh

Running Forticlient 7.0.0, already tried to update to latest 7.0 version.

The same VPN profile used on another device works correctly.

BR

Giacomo

[FarinaAhmed]

Steps to troubleshoot the FortiClient VPN connection issue:

1. Verify network connectivity.
2. Check VPN server settings in FortiClient.
3. Disable firewall and antivirus temporarily.
4. Update FortiClient to the latest version.
5. Flush DNS cache using the command "ipconfig /flushdns".
6. Remove any conflicting VPN or networking software.
7. Contact Fortinet support for further assistance.

[rtichkule]

Hello,

Disable your computer's firewall and antivirus software for a while to check if they are preventing the VPN connection. If the VPN connection functions after you disable them, change the settings to let the required VPN traffic through.

FortiClient or your PC can occasionally be restarted to fix momentary connectivity problems or conflicts. Try reconnecting to the VPN again after closing FortiClient and restarting your computer.

[KentHenry8]

Remove the contents of %localappdata%\Forticlient\ and it will connect again. Note that if you use SAML, this will require a new sign-in (and probably remove any other saved credentials), but it will not remove connection profiles since those are stored in the registry. 

I discovered this after I was able to connect just fine on another Windows profile from a user's computer that was getting -5052 and -5053 after reinstalling, many restarts, trying 7.0.7.x, 7.0.8.x, and 7.2.0.x

I'm sure there is a more elegant solution than blasting the whole folder, but I haven't seen the issue more than once or been able to reproduce it for testing. 

[cis]

Hi,

unfortunately I get the same error (better said errors, namely -5052, -5053).

However, none of the provided solutions has worked.

I did:

1. Verify network connectivity.
2. Check VPN server settings in FortiClient.
3. Disable firewall and antivirus temporarily.
4. Update FortiClient to the latest version.
5. Flush DNS cache using the command "ipconfig /flushdns".
6. Remove any conflicting VPN or networking software.

In addition, as KentHenry8 stated, I tried removing the %localappdata%\Forticlient folder as well as the one in Roaming.

On the local Administrator user the client is able to connect.

What is happening here?

[kvimaladevi]

Hi,

If you have done all that you have mentioned and if the issue is still there, we will have to check the ssl vpn debugs to understand the issue.

diag debug reset
diag vpn ssl debug-filter clear
diag vpn ssl debug-filter src-addr4 <client public IP>
diag debug app sslvpn -1
diag debug app fnbamd -1
diag debug console timestamp en
diag debug en

% connect to VPN from test user having issues %

To disable :
diag debug disable

We will need the above logs to check the exact error.

Regards,

Vimala

[cis]

Hi,

thanks for the reply. Here are the logs from the firewall as requested plus the client logs:

sslvpnlib.log: https://pastebin.com/8UxZPy8r

firewall log: https://pastebin.com/khpEHfRF

guimessenger.log: https://pastebin.com/F94nGgc1

Hopefully someone does find something. Thanks in advance guys.

Best regards

[cis]

Any ideas?