VPN IPSEC - Firmware 7.4.1

[Sandoval]

Dear all, good morning. We have a Fortigate 60F on version 7.4.0 with an IPSEC VPN Client to Site configured. In firmware version 7.4.0 the VPN works normally, but when we update to version 7.4.1 or 7.4.2 the VPN stops working, it connects but remains as "0bytes received". Does anyone have any idea what is going on?

[Umer221]

@Sandoval 

Please provide more details, if it is an IPsec site to site or a remote access vpn.

[Sandoval]

It's a remote access VPN

[Umer221]

Please run the following commands and then try to connect the IPSec dial-up vpn. Once you see the logs on the FortiGate CLI, then post them here:

CFM-SF-FW # digdiagnose debug disable

CFM-SF-FW # diagnose debug console timestamp enable

CFM-SF-FW # diagnose vpn ike log-filter name "S2S-VPN"    (Specify tunnel name)

CFM-SF-FW # diagnose debug application ike -1

Debug messages will be on for 30 minutes.

CFM-SF-FW # diagnose debug enable

[pkumari]

@Sandoval , do you face this issue for all the users?

Please also provide Forticlient debug along with the IKE debug provided by @Umer221 

https://community.fortinet.com/t5/FortiClient/Technical-Tip-How-to-generate-and-export-Debug-logs-fr...