Skip to main content
mehdi_ouazaa
New Member
January 10, 2019
Solved

SSL VPN Proxy Error

  • January 10, 2019
  • 4 replies
  • 46952 views

Hi all,

I created a SSL vpn with full access.

I am able to connect to the VPN portal via web browser.

When trying to access an internal https service, I receive this message:"

SSL VPN Proxy Error

The proxy server could not handle the request GET /proxy/597d4bc4/http/x.x.x.x/.

Reason: Access Denied

 "

the x.x.x.x IP is the address of the internel service and is added to the vpn security policy as the destination address.

 

I dont see any hits on the VPN access police!!!

On the VPN event tab I have "SSL web application blocked" as a message for that destination host.

 

Could you please help troubleshooting this issue?

    Best answer by Toshi_Esumi

    An old thread below indicates this error shows up if no proper policy exists from ssl.root to the destination. Do you have the policy?

    https://forum.fortinet.com/tm.aspx?m=139614

     

    4 replies

    Toshi_Esumi
    SuperUser
    SuperUser
    January 10, 2019

    An old thread below indicates this error shows up if no proper policy exists from ssl.root to the destination. Do you have the policy?

    https://forum.fortinet.com/tm.aspx?m=139614

     

    mehdi_ouazaa
    New Member
    January 14, 2019

    Dear Toshi,

     

    Thanks a lot,

     

    Yes I do have the policy, but was badly configured :(

    kevlarsjal
    New Member
    July 29, 2019

    I got the same problem, though I use vpn proxy, check it here. 

    MaxKlaud
    New Member
    November 22, 2022

    Lol, you may have been blocked and now you don't have access to this proxy server, it sounds ridiculous. I don't understand how this could happen if you are the creator of this SSL VPN? I also tried to read the article on https://soax.com/geoproxy-extension-firefox to better understand your problem with the proxy server and still can't figure out where the solution of this stuff is. Most of all it looks like a bug of the system and if you can somehow reboot it, then do it. Honestly, nothing else comes to my mind, so as always I hope for a reboot, huh. I wish you good luck and hope that everything will be resolved. Take care of yourself!

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!