Skip to main content
mbhot
mbhot
New Member
December 21, 2021
Question

VPN Client

  • December 21, 2021
  • 1 reply
  • 4758 views

Hi there,

I have a 400D running 6.4.8 build 1914. We have an SSL VPN setup which allows clients to connect back to us. Our clients all use version 5.6.6.1167 of the FortiClient.

 

This version is very old now and I am keen to upgrade our clients. I have attempted to use the free "FortiClient VPN version 7.0.2.0090"

 

I always get the error "Unable to establish the VPN connection. The VPN server may be unreachable (-14)"


I know the free version doesn't have support in itself, but I'm a bit confused how I'm supposed to upgrade to a newer client version without using the free version. Is there another version I should be using? Should the free version work?

Also, we have host checking enabled, I'm not sure if this is part of the problem? Maybe it's something that the free client doesn't support?

Thanks

1 reply

mbhot
mbhotAuthor
New Member
December 21, 2021

Also, I've done some more digging and I can confirm that the free version 7.0.2.0090 does NOT work. The free version 6.4.7.1713 does NOT work. But the non-free FortiClient 6.4.7.1713 in demo mode, DOES work.

So i guess the question is - is there something different in the free version vs the paid for version?

Thanks

AlexC-FTNT
Staff
AlexC-FTNT
Staff
December 21, 2021

If you have the paid version, the FortiClient support should assist you on this.
The free FortiClient versions allow to establish IPSECVPN and SSLVPN connections and nothing else. So make sure that host-check is disabled in sslvpn portal settings (config vpn ssl web portal / edit "full-access" /set host-check none / end)
Generally, if the FortiGate version is 6.x, FortiClient should also be 6.x (same version, not older, not newer). There could be problems in the machines when you install/remove different versions. You should reboot after every uninstall. 

mbhot
mbhotAuthor
New Member
December 21, 2021

Thanks. We do not have the paid for version, only a trial of it.

Is this the only way to make host checking work, with the paid version?

Thanks

Terms & ConditionsAccessibility statement