Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ladeth
New Contributor II

[SOLVED] RDP through VPN SSL doesn't work anymore

 

We have a Fortigate 110C configured for Remote Access. We have configured Web Access Portal and published a bookmark to access a Windows 2008 R2 virtual Machine with RDP Native protocol. All was working fine when the Fortigate was under FortiOS 4.0 MR3 Patch 10. Since we upgraded our firewall to FortiOS 5.2.2, we are now unable to connect through RDP. When we use RDP Native, after having clicked on the bookmark, we are prompted to enter the Windows 2008 user and password. Then, the dialog box displays "Securing remote connection" indefinitely and never displays the Remote Desktop. When we use RDP, after having provided the required information, a Java applet is started, we can see the Remote Desktop for 1 or 2 seconds and the Java applet crashes with the following error messages :

    - javax.net.ssl.SSLException Connection has been shutdown: javax.net.ssl.SSLException:javax.net.ssl.SSLException: Software caused connection abort: recv failed (see attached screen capture)     - javax.net.SocketException Software caused connection abort: recv failed      The Remote Desktop to the Windows 2008 R2 works fine from a computer located in the same LAN than the virtual machine.      Does anyone have the same issue ? Thanks in advance for your help.

FCNSP V.4, V.5

FCNSP V.4, V.5
1 Solution
ladeth
New Contributor II

Hello,

 

RDP through VPN SSL is now working fine on my Fortigate 110C Cluster with FortiOS 5.2.2. Here's the solution I've applied (thanks to Dave for the idea...) :

[ul]
  • Reverted back my FG110C cluster to FortiOS 5.0.6 (this is the older backup file I have for this cluster) => RDP VPN SSL is working fine.
  • Upgraded my cluster to 5.2.2, applying ALL the patches between 5.0.6 and 5.2.2 (i.e. : 5.0.6 => 5.0.7 => 5.0.8 => 5.0.9 => 5.0.10 => 5.2.0 => 5.2.1 => 5.2.2) and RDP VPN SSL is working fine at each step of the upgrade path.[/ul]

    Hope this can help someone else...

     

     

  • FCNSP V.4, V.5

    View solution in original post

    FCNSP V.4, V.5
    11 REPLIES 11
    Chura
    New Contributor

    5.2 Chain got the bug fixed under 5.2.3 release.

    No news regarding 5.0 Chain.

    //Chura CCIE, NSE7, CCSE+

    //Chura CCIE, NSE7, CCSE+
    JOSIAH_BOZIAH
    New Contributor III

    My web portal RDP through VPN SSL does not work, just opens a blank page with certificate error in internet explorer. I have a fortiwifi 20c with fortios v5.2.13. Please help!

    Labels
    Top Kudoed Authors