Hi team, After upgrading our FortiGate to FortiOS 7.2.12, SSL VPN connections via FortiClient were consistently disconnecting at 40% during tunnel setup.
This issue did not occur on 7.2.11. After downgrading to FortiOS 7.2.11, SSL VPN connections are now stable and working as expected.
Could you help me troubleshoot this issue further to confirm root cause and ensure safe upgrade paths in the future?
Hi @Toshi_Esumi, from my understanding, each Enterprise Application is corresponding to one FortiGate thus changing Signing Option to 'Sign SAML response and assertion' only applies to the corresponding FortiGate.
@GeorgeZhong I guess I asked this in a wrong way. What I wanted to ask was...
Would it break the communication if it's set as 'Sign SAML response and assertion' while a FGT is still running 7.2.11 (before upgrading to 7.2.12)?
Toshi
Never mind. Our customer couldn't wait the answer and made the change on the Entra ID side before we upgrade the FGT to 7.2.12, then confirmed it still worked fine.
The SSL VPN web and tunnel mode feature will not be available from the GUI or the CLI on the FortiGate G-Series Entry-Level models, including 90G and variants. Settings will not be upgraded from previous versions.
Consider migrating to using IPsec Dialup VPN for remote access. See FortiOS SSL VPN to IPsec VPN migration.
| User | Count |
|---|---|
| 2626 | |
| 1400 | |
| 810 | |
| 672 | |
| 455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.
