Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Schwierzeck
New Contributor

SSLVPN - RDP Java Applet do not work

I have some trouble with the RDP JavaApplet I configured a RDP session in the ssl portal as bookmark. The firewall is Forti OS 5.0.4. config vpn ssl web portal edit " Kontrast" set allow-access smb rdp rdpnative set theme steelblue set heading " Welcome SSL Access Portal" config widget edit 1 set name " Bookmarks" set allow-apps smb rdp citrix rdpnative config bookmarks edit " JumpStationCMS - [Java-Applet]2" set apptype rdp set description " JumpStationCMS" set host " 172.16.25.117:3389" set full-screen-mode enable set logon-user " test" set logon-password " test" set keyboard-layout de next end next end next end Login to the portal work fine. After clicking the bookmark, the Following messages in the browser appear. " Launching RDP session... Connect to:172.16.25.117:3389 -f -m de XXXX" After a few secound the wollowing windows appear " Connection Exeption SSL negotiation faild, please check your FortiGate configuration" A short excerpt from the debug log. [103:CMS]req: XXXX:3389 [103:CMS]rmt_websession.c:340 decode session id ok, user=[kontrast],group=[SSLVPN-Kontrast],portal=[Kontrast],host=[89.246.82.22],realm=[],idx=1,auth=1,login=1378357418 [103:CMS]CONNECT to XXXX on port 3389 In the attached debug log you can see, that the FortiGate try to reach the server " XXXX" But in the configuration there is not entry with " XXXX" It seems to me, that this could be a bug. Does any one know what is happening here?
4 REPLIES 4
Secure_IT_BE_Nick
New Contributor III

Same problem here. FOS 504 has several issues i believe with SSLVPN

[link]https://www.secure-it.be[/link]

[link]https://www.secure-it.be[/link]
Schwierzeck
New Contributor

I got this from FortiNet Support. " Please be informed the issue is already reported to engineering for fix. I' ll inform you in case of any update on this."
Secure_IT_BE_Nick
New Contributor III

Thx for the update! Seems Fnet has some issues with SSLVPN with 504..

[link]https://www.secure-it.be[/link]

[link]https://www.secure-it.be[/link]
Secure_IT_BE_Nick
New Contributor III

Have run a debug also, same result Connect to XXXX

[link]https://www.secure-it.be[/link]

[link]https://www.secure-it.be[/link]
Labels
Top Kudoed Authors