Forticlient 7.4.1.1697 on Ubuntu 22.04.5 failing to create SSL tunnel

[laberton]

It's basicly what the title says. We use forticlient to connect to the company's VPN. I was told that the request reaches successfully the server but when it tries to create the ssl tunnel it fails. I already tried to reinstall, changing the wifi connection used.

Here I have extracted some info from the sslvpn.log file that I think relates to the problem.
Could you help me please?

20241112 09:58:28.682 TZ=-0300 [sslvpn:DEBG] vpn_connection:2451 EMS info added : serial number FCTEMS8823008006, tenant id 00000000000000000000000000000000
20241112 09:58:28.682 TZ=-0300 [sslvpn:DEBG] main:1609 Create socket connection
20241112 09:58:28.695 TZ=-0300 [sslvpn:DEBG] main:1687 Message to UI: A FortiToken code is required for SSL-VPN login authentication.
20241112 09:58:28.695 TZ=-0300 [sslvpn:DEBG] main:1705 153 bytes sent.
20241112 09:58:36.260 TZ=-0300 [sslvpn:DEBG] vpn_connection:659 http connection closed.
20241112 09:58:36.260 TZ=-0300 [sslvpn:DEBG] vpn_connection:521 Response line: 200 OK
20241112 09:58:36.858 TZ=-0300 [sslvpn:INFO] sslvpn:241 Authentication passed.
20241112 09:58:36.858 TZ=-0300 [sslvpn:INFO] vpn_connection:2405 /remote/fortisslvpn
20241112 09:58:36.858 TZ=-0300 [sslvpn:DEBG] vpn_connection:2451 EMS info added : serial number FCTEMS8823008006, tenant id 00000000000000000000000000000000
20241112 09:58:37.059 TZ=-0300 [sslvpn:DEBG] vpn_connection:659 http connection closed.
20241112 09:58:37.059 TZ=-0300 [sslvpn:DEBG] vpn_connection:521 Response line: 200 OK
20241112 09:58:37.059 TZ=-0300 [sslvpn:INFO] vpn_connection:2405 /remote/fortisslvpn_xml
20241112 09:58:37.059 TZ=-0300 [sslvpn:DEBG] vpn_connection:2451 EMS info added : serial number FCTEMS8823008006, tenant id 00000000000000000000000000000000
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] vpn_connection:659 http connection closed.
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] vpn_connection:521 Response line: 200 OK
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] server_response_parser:129 DTLS config hello version: 2
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] server_response_parser:130 DTLS config heartbeat interval: 10
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] server_response_parser:131 DTLS config heartbeat fail count: 10
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] server_response_parser:132 DTLS config heartbeat idle timeout: 10
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] server_response_parser:133 DTLS config client hello timeout: 60
20241112 09:58:37.587 TZ=-0300 [sslvpn:INFO] vpn_connection:2405 /remote/portal
20241112 09:58:37.587 TZ=-0300 [sslvpn:DEBG] vpn_connection:2451 EMS info added : serial number FCTEMS8823008006, tenant id 00000000000000000000000000000000
20241112 09:58:37.788 TZ=-0300 [sslvpn:DEBG] vpn_connection:659 http connection closed.
20241112 09:58:37.788 TZ=-0300 [sslvpn:DEBG] vpn_connection:521 Response line: 200 OK
20241112 09:58:37.788 TZ=-0300 [sslvpn:INFO] sslvpn:512 /remote/portal username extracted xxx
20241112 09:58:37.788 TZ=-0300 [sslvpn:DEBG] vpn_connection:1612 Login process end on status: 0
20241112 09:58:37.788 TZ=-0300 [sslvpn:INFO] sslvpn:923 Login successful
20241112 09:58:37.814 TZ=-0300 [sslvpn:INFO] main:1779 State: Configuring tunnel
20241112 09:58:37.823 TZ=-0300 [sslvpn:DEBG] vpn_util:299 Get connection name: Alberton
20241112 09:58:37.823 TZ=-0300 [sslvpn:DEBG] vif:135 Restarting NetworkManager
20241112 09:58:37.930 TZ=-0300 [sslvpn:DEBG] vif:147 Using nmcli to allocate tun device.
20241112 09:58:38.373 TZ=-0300 [sslvpn:EROR] vpn_connection:909 Failed to set default remote address for datagram socket.
20241112 09:58:38.373 TZ=-0300 [sslvpn:EROR] vpn_connection:2566 Create tunnel connection failed.
20241112 09:58:38.387 TZ=-0300 [sslvpn:EROR] vpn_connection:2566 Create tunnel connection failed.
20241112 09:58:38.388 TZ=-0300 [sslvpn:EROR] vpn_connection:1998 Start tunnel failed
20241112 09:58:38.392 TZ=-0300 [sslvpn:INFO] nmtools:865 Network Manager settings backup file doesn't exist
20241112 09:58:38.392 TZ=-0300 [sslvpn:DEBG] nmtools:1200 No connections to restore
20241112 09:58:38.392 TZ=-0300 [sslvpn:DEBG] dns:302 File /etc/nm_resolv.forticlient.backup doesn't exist
20241112 09:58:38.401 TZ=-0300 [sslvpn:DEBG] vpn_util:299 List fctvpn connection: fctvpnd579e9a5

[eamaro]

Well, I think I spoke too soon.
I'm back with issues on Wi-Fi. Now the issue is that after a while Wi-Fi is continuously reconnecting.
If I restart forticlient.service and reconnect to the vpn it works for another while.
I will see if it happens when the dhcp renews the lease, because It seems like just about half an hour, which would be close to the 1h lease time I think we're doing on our Wi-Fi network.