Internet Explorer 11 with TLS v1.2 not working with SSL load balancer - 5.2.3

Paul_S · ‎05-05-2015

Just upgraded my FG200B 5.2.2 > 5.2.3, now my SSL Load balance virtual server (SSL protect server) does not load the Exchange 2010 OWA webpage (the site behind my SSL virtual server) in IE 11. If I disable TLS v1.2 in the advanced settings of Internet Explorer 11, then the page loads just fine. Also, Firefox and Google chrome load the page just fine. If I bypass the virtual server (The fortigate), then all three browsers load the OWA page fine.

I am currently installing all the MS hotfixes for Windows 7 SP1 (64-bit) to see if this changes anything.

FG200D 5.6.5 (HA) - primary [size="1"]FWF50B' s 4.3.x, FG60D's 5.2.x, FG60E's 5.4.x [Did my post help you? Please rate my post.][/size] FAZ-VM 5.6.5 | Fortimail 5.3.11 Network+, Security+

praveen_Dharmaraj · ‎04-06-2016

Hi,

Did you got solution for this issue , am phasing same issue .

Regards/

Paul_S · ‎04-06-2016

yes, update to a newer firmware version.

FG200D 5.6.5 (HA) - primary [size="1"]FWF50B' s 4.3.x, FG60D's 5.2.x, FG60E's 5.4.x [Did my post help you? Please rate my post.][/size] FAZ-VM 5.6.5 | Fortimail 5.3.11 Network+, Security+

emnoc · ‎04-06-2016

Try using curl or openssl and see what's supported by the fortigate https vip

e.g

openssl s_client -connect 1.1.1.1:80 -tls1_2

I bet the VIP is not support tls1.2

PCNSE

NSE

StrongSwan

Internet Explorer 11 with TLS v1.2 not working with SSL load balancer - 5.2.3

Nominate a Forum Post for Knowledge Article Creation