Installed the new update (7.4.4) since then - no VPN possible - permission denied (- 455)

[TZ1]

Hi, the subject explains everything.

This morning I installed the newest update. Since then noone can start a vpn-connection. Me neither - and I am sure, that my logon is correct. And the others can't be all wrong also.

Everything else works, and in the office I can logon as administrator - everything looks fine.

The LDAP-Server is running, and hasn't been changed at all, not even rebootet.

I rebootet the FortiGate again, just in case - didn't help.

We use FortiTokens, but it is not asking for the token - already a problem with the logon.

Any Ideas?

[Anthony_E · Accepted solution]

Hello,

Could you please have a look at this discussion?:

https://community.fortinet.com/t5/Support-Forum/SSL-VPN-Failure-Permission-Denied-455-after-update-t...

Regards,

[rbraha]

Hi @TZ1 

Are you using LDAPs port 636 on your FGT or plain ldap port 389?

If yes maybe this KB will help.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-LDAPS-connections-no-longer-work-after-upd...

If not try to run the below debug commands on FGT CLI:

diag debug cons time enable

diag debug application fnbamd -1

diag debug application sslvpn -1

diag debug enable

[TZ1]

Hi, It is 636.

In Name - Servername - IP/Name - IP-address.

Looks good so far, but if I activate Server Identity Check it looses contact to the server.

[rbraha]

The server identity check option is used when enable/disable  against its certificate and subject alternative name(s).