Forticlient

[Fabio74]

Hello everyone, can someone explain to me why I can't connect Forticlient ? As you can see from the scenario, the public ip of the isp makes me reach the fortigate, but I can't go further. Thanks to anyone who can give me some suggestions

 

[Sheikh]

Hi Fabio,

Are you using Forticlient for SSLVPN or IPSEC VPN ? Anyways in both cases debug logs on FortiGate will help you to give better insight of issue.

For SSLVPN

diag debug reset
diag debug console timestamp enable
diag debug app fnbamd -1
diag debug app sslvpn -1
diag debug enable

**** Try to connect again****

To disable logging use 

dia debug disable

For IPSEC VPN

diag debug reset
diag debug console timestamp enable

diagnose debug application fnbamd -1

diagnose vpn ike log-filter src-addr4 x.x.x.x 
(Replace x.x.x.x with the IP address of the PC trying to connect )

diagnose debug application ike -1

diagnose debug enable

******** Try to connect again****

To disable logging use 

dia debug disable

regards,

Sheikh

[Fabio74]

Grazie Sceicco

Proverò oggi stesso, grazie per il suggerimento. Comunque la connessione è ipvsec