SSL-VPN automatic resolution screen not working after 7.0.4 firmware upgrade

[Baya]

After updating, all our SSL-VPN RDP clients complained because their session stopped auto-scaling the resolution on their browser. Have someone found a way to make this unintended behaivor stop? We could not find any way to made it like it was befor patching. We were specting that 7.0.5 could fix it but i dont see any mention in the log page...

[gt1 · Accepted solution]

Found how to solve this. You must go in to each SSL VPN Portal and set the Width and Height to 0. 

Command:

FIREWALL (web-access) # show full-configuration | grep window
set default-window-width 1024
set default-window-height 768

FIREWALL (web-access) # set default-window-width 0

FIREWALL (web-access) # set default-window-height 0

FIREWALL (web-access) # end

Then you must change your bookmarks to 0 and 0 for height and width and full screen works again.

[Anonymous]

Hi, 
Thank you for using Fortinet Community. 

The FortiOS 7.0.4 release notes contains the following information:

747602  - Allow customization of RDP display size (width and height settings) for SSL VPN web mode w...

The following are the CLI reference for:

• config VPN-SSL web user-group-bookmark
• config vpn ssl web user-bookmark

Please let me know if this works for you :)

[Baya]

Hello ibinmohdishak,

First of all, thanks for the quick answer. Sadly I have already read the links you put there. I guess the misunderstanding is because this is not my native language. I would try to express myself better.

The issue is that we cannot find a configuration for the automatic resize resolution on the SSL VPN web (that uses RDP). As you can see in the documentation there is a way to manually configure the screen width and height:

width	Screen width .	integer	Minimum value: 640 Maximum value: 65535	1024
height	Screen height .	integer	Minimum value: 480 Maximum value: 65535	768

Before 7.0.4 this was done automatically, now all our RDP conections apparently need fixed values. Because of covid, a big part of our users are working on their home computers, they all have different size monitors and, as you can assume, it is not an option to manually set all users. We update it because the documentation explicity said that this was only done when creating a new connection or bookmark:

747602

Allow customization of RDP display size (width and height settings) for SSL VPN web mode when creating a new connection or bookmark. Administrators can also specify the display size when pre-configuring bookmarks.

But this is sadly not true :(, the already configured users have been all changed to this new fixed values automatically. I hope we're just misreading something!

[gt1]

We have the same problem and can no longer upgrade our firewalls due to the screen size not working. 7.2.0 did not fix the problem. Why would they change something that has worked perfect for so long?

[gt1 · Accepted solution]

Found how to solve this. You must go in to each SSL VPN Portal and set the Width and Height to 0. 

Command:

FIREWALL (web-access) # show full-configuration | grep window
set default-window-width 1024
set default-window-height 768

FIREWALL (web-access) # set default-window-width 0

FIREWALL (web-access) # set default-window-height 0

FIREWALL (web-access) # end

Then you must change your bookmarks to 0 and 0 for height and width and full screen works again.

[Baya]

Thank you gt1, it worked just fine after upgrading to 7.2.0 (those modifiers cannot be set on older firmware). 

[shayempour]

Hi, How do you get to that part of the configurations to put in the codes?

[gt1]

config vpn ssl web portal

edit web-access

[DTG-POLE-ARCHI]

Hello,

Yesterday, we put firmware 7.2.3.

We try du configure default-window-width 0 et default-window-height 0 for all VDOM.

I put my bookmark width 0 and height 0.

But it doesn't work...

[DTG-POLE-ARCHI · Accepted solution]

Hello, I found how to solve my issue (seems like a bug):

1. from SSL-VPN-Portals, select your portal, then click on "Edit in CLI"
2. remove the reference to width and hight :

config bookmark-group
edit "gui-bookmarks"
config bookmarks
edit "YOUR BOOKMARK"
set width 0
set height 0
end

• Click again on "Edit in CLI"
• Add the default-window-width:

set default-window-width 0
set default-window-height 0
end

• Then, I had to click on "Cancel" (not "OK"). If I click on "Ok", my changes are not taken into account.

See https://community.fortinet.com/t5/FortiGate/Technical-Tip-Adjusting-width-amp-height-for-RDP-bookmar... for more informations.