Forticlient

Fabio74 · ‎03-10-2023

Hello everyone, can someone explain to me why I can't connect Forticlient ? As you can see from the scenario, the public ip of the isp makes me reach the fortigate, but I can't go further. Thanks to anyone who can give me some suggestions

Sheikh · ‎03-10-2023

Hi Fabio,

Are you using Forticlient for SSLVPN or IPSEC VPN ? Anyways in both cases debug logs on FortiGate will help you to give better insight of issue.

For SSLVPN

diag debug reset
diag debug console timestamp enable
diag debug app fnbamd -1
diag debug app sslvpn -1
diag debug enable

**** Try to connect again****

To disable logging use

dia debug disable

For IPSEC VPN

diag debug reset
diag debug console timestamp enable

diagnose debug application fnbamd -1

diagnose vpn ike log-filter src-addr4 x.x.x.x
(Replace x.x.x.x with the IP address of the PC trying to connect )

diagnose debug application ike -1

diagnose debug enable

******** Try to connect again****

To disable logging use

dia debug disable

regards,

Sheikh

**If you come across a resolution, kindly show your appreciation by liking and accepting it, ensuring its accessibility for others**

Fabio74 · ‎03-13-2023

Grazie Sceicco

Proverò oggi stesso, grazie per il suggerimento. Comunque la connessione è ipvsec

Forticlient

Nominate a Forum Post for Knowledge Article Creation