SSL-VPN only works after 10min

[IT_Adm]

Hi,

Fortigate 601E

Forti OS v6.2.7 build1190 (GA)

SSL-VPN

FortiClient 6.0 and 6.4

We had a successfull ssl vpn setup, until a few weeks ago, as everyone could connect and start accessing the internal network right away, but now and, ONLY in new install of the FortiClient, it takes exactly 10min untill we can gain access to the internal network, whereas all  the laptops that were installed previously, can access it as soon as the dial up is done .

As we connect we see one route being added to the client, to a partial segment of our network, instead of the full scope that we configured as internal network. After the said 10min, that route disapears, and everything starts to work.

We have split tunnel and split dns enabled, as well as access via internal network for specific FQDN ( followed this doc > https://community.fortinet.com/t5/FortiGate/Technical-Tip-Access-to-Specific-FQDN-using-Split-Tunnel... ).

I am struggling here specially because it doesn´t affect us all, just the new laptops with new installation of the Forticlient...

Has anyone had this problem ?

[Anonymous]

Hello IT_Adm,

This could be an issue with the new Forticlient version installation which might not be compatible with the FortiOS version or could be a bug on that specific FortiClient version as well. However, is it possible to uninstall the new Forticlient version and install the old one on the new laptop to confirm if that works?

Also to debug this issue, enable the debug level logs on the Forticlient where you see this issue and collects the logs for further review 

https://community.fortinet.com/t5/FortiClient/Technical-Note-How-to-enable-debug-log-in-FortiClient-...

[IT_Adm]

Hi,

thanks for the reply.

Just a quick update in case anyone got this.

Turns out that a firmware upgrade and restart the appliance, solved this issue.

Updated to the 6.2.10 version.