SSL VPN Connection down message

[Slizzard]

A particular user received this message when attempting to connect to our vpn using Forticlient

SSL VPN connection is down

In one of the logs(fortitray.exe_sslvpnlib_1.log i noticed a "permission denied" error

sslvpnlib 1515 info] ====================================
[2025-11-14 10:45:16.4795660 UTC-04:00] [13656:6260] [sslvpnlib 1522 info] GetWebPage() succeeded. bRC=1,strContentType=text/html; charset=utf-8,strPageLength=1968
[2025-11-14 10:45:16.4795769 UTC-04:00] [13656:6260] [sslvpnlib 501 debug] CSslvpnBase::DoConnect 3215
[2025-11-14 10:45:16.4795840 UTC-04:00] [13656:6260] [sslvpnlib 501 debug] CSslvpnBase::DoConnect 3218 /remote/logincheck request returned permission denied
[2025-11-14 10:45:16.4795917 UTC-04:00] [13656:6260] [sslvpnlib 501 debug] <<<<DoConnect(): bRC=0, ErrorCode=-7105

[2025-11-14 10:45:16.5069513 UTC-04:00] [13656:6260] [sslvpnlib 4611 debug] called.
[2025-11-14 10:45:16.5069561 UTC-04:00] [13656:6260] [sslvpnlib 4615 warning] FortiSslvpn has been initialized, exit.
[2025-11-14 10:45:16.5071294 UTC-04:00] [13656:6260] [sslvpnlib 5410 debug] CSslvpnBase::OnConnect() Error occured internally.
[2025-11-14 10:45:16.7607177 UTC-04:00] [13656:7160] [sslvpnlib 501 debug] CSslvpnBase::OnDisconnect:1385 call DisconnectFortiSslvpn.

[2025-11-14 10:45:16.7607331 UTC-04:00] [13656:7160] [sslvpnlib 1394 debug] CSslvpnBase::DisconnectFortiSslvpn() Called.
[2025-11-14 10:45:16.7607379 UTC-04:00] [13656:7160] [sslvpnlib 501 debug] CSslvpnAgent::DisconnectSslvpn 214
[2025-11-14 10:45:16.8724325 UTC-04:00] [13656:7160] [sslvpnlib 702 debug] called.
[2025-11-14 10:45:17.2278877 UTC-04:00] [13656:7160] [sslvpnlib 688 debug] uStatus=0
[2025-11-14 10:45:17.2280842 UTC-04:00] [13656:7160] [sslvpnlib 1439 info] Called.
[2025-11-14 10:45:17.2280880 UTC-04:00] [13656:7160] [sslvpnlib 1501 debug] CSslvpnBase::GetWebPageEx() called. URL=/remote/logout
[2025-11-14 10:45:17.2281535 UTC-04:00] [13656:7160] [sslvpnlib 1877 debug] CSslvpnBase::GetWebPage() Called.

[2025-11-14 10:45:17.2282141 UTC-04:00] [13656:7160] [sslvpnlib 1810 debug] FGT Does not need EMS SN
[2025-11-14 10:45:17.2282752 UTC-04:00] [13656:7160] [sslvpnlib 1810 debug] FGT Does not need EMS SN
[2025-11-14 10:45:17.2283252 UTC-04:00] [13656:7160] [sslvpnlib 1810 debug] FGT Does not need EMS SN
[2025-11-14 10:45:17.2283538 UTC-04:00] [13656:7160] [sslvpnlib 2121 error] Empty web page, return FALSE.
[2025-11-14 10:45:17.2289692 UTC-04:00] [13656:7160] [sslvpnlib 1513 info] ====================================
[2025-11-14 10:45:17.2289709 UTC-04:00] [13656:7160] [sslvpnlib 1514 info]
[2025-11-14 10:45:17.2289721 UTC-04:00] [13656:7160] [sslvpnlib 1515 info] ====================================
[2025-11-14 10:45:17.2289727 UTC-04:00] [13656:7160] [sslvpnlib 1519 error] GetWebPage() failed. bRC=0,strContentType=,strPageLength=0
[2025-11-14 10:45:17.2290141 UTC-04:00] [13656:7160] [sslvpnlib 4611 debug] called.
[2025-11-14 10:45:17.2290151 UTC-04:00] [13656:7160] [sslvpnlib 4615 warning] FortiSslvpn has been initialized, exit.
[2025-11-14 11:04:37.7042105 UTC-04:00] [13656:17340] [sslvpnlib 72 debug] CFortiTrayApp::ExitInstance 763
[2025-11-14 11:04:38.9682088 UTC-04:00] [13656:17340] [sslvpnlib 1413 info] trace stopped

We use DUO to authenticate and removed and reregistered the user just to make sure

Any thoughts?

[funkylicious]

hi,

i would suggest testing the password or making sure that the user is part of the groups in the firewall rules, these would be part of the reasons why it gets permission denied.