Getting the Error Message

[AthenaTang]

I am getting the below error message when connecting to the FortiClient VPN, which it used to work.

Your PC does not meet the host checking requirements set by the firewall. Please check that your OS version or antivirus and firewall applications are installed and running properly or you have the right network interface. (-7006)

I've checked with Microsoft and they confirmed the WMI SecurityCenter2 namespace works correctly.

Thanks for help.

[AEK]

You should contact your remote FortiGate admin. He will inform you which security checks are enabled in SSL server config on the FortiGate, so you can try to meet them before connecting.

[AthenaTang]

Thanks for your suggestion.

However, it used to work and that's why I'm afraid it's something wrong in my computer.

Where could I check the security check in FortiClient please?

Best Regards,

Athena

[AEK]

You can find the security check config on the firewall, under menu: VPN > SSL-VPN Portals. You cannot find it on FortiClient.

[AthenaTang]

Hi AEK,

What we suffer is we lost the Admin guy, and that's the reason we have to learn how to support the system from now on until the new guy is on board. 

I tried to access VPN>SSL-VPN Portals, but don't know where to read the secruity config.Could you please direct me the locaton?

Thank you.

Regards,

Athena

[dingjerry_FTNT]

Hi @AthenaTang ,

You have to check it with your FortiGate Admin guy for the host checking configuration.  Or if your organization has FortiClient EMS, you may contact the EMS admin to check it.

It used to work does not mean it will work.  The FortiGate or FortiClient EMS may modify the Host Checking configuration in the SSL VPN settings.

[AthenaTang]

Hi dingjerry_FTNT,

Thank you for your reply.

What we suffer is we lost the Admin guy, and that's the reason we have to learn how to support the system from now on until the new guy is on board. 

I tried to access VPN>SSL-VPN Portals, but don't know where to read the secruity config.Could you please direct me the locaton?

Thank you.

Regards,

Athena

[dingjerry_FTNT]

Hi Athena,

Please edit the SSL VPN portal you are using and check this part:

[AthenaTang]

Hi dingjerry_FTNT,

Here is the config. (Sorry, it's in Chinese, but you can see the same DNS Split wording)

Is this correct please?

Best Regards,

Athena 

[dingjerry_FTNT]

Hi Athena,

No worries, I can read Traditional Chinese.

OK, none of the settings is enabled.  I was worried about one of them enabled causing denying your SSL VPN connection.

The message you got is absolutely caused by one or both of the settings.  So please confirm:

1) This FGT is the one you connected to for SSL VPN connection;

2) You have only one SSL VPN portal applied.  Otherwise, please check all of them.