Not getting an IP address using SSL VPN!

[#1]

Fortigate-60 3.00-b-576(MR5 Patch7) Any user that connects is not getting an IP address in return and therefore can' d do anything on the network. See attached.

[#2]

Thanks Bob, so now I can ping certain internal addresses and RDP to them but I don' t get an IP address, can' t map drives etc.

[rwpatterson]

What does your policy(s) look like? What services?

[#4]

What specifically are you looking for? Here is a screen shot of the policy I think you mean:

[rwpatterson]

Try using 2 policies.

One from wan1 to ssl.root, type SSL-VPN, any-> any, all services.

One from ssl.root to [internal servers|VIP|subnet], type accept, SSL-VPN IP range -> inside device range, services.

[ede_pfau]

@rwpatterson:

# One from wan1 to ssl.root, type SSL-VPN, any-> any, all services.

you mean wan1->internal, right?

[rwpatterson]

Nope. In tunnel mode I use the two tiered wanx -> ssl.root then ssl.root -> internal approach. With the web mode wanx -> internal works fine. May be overkill, but I stick with what works for me.

[ede_pfau]

a-ha, thanks. I' ve got to think about this.