VPN stuck at status 98%

FKribs · ‎07-31-2014

We are running Windows Server 2012 R2. We have installed the most recent FortiNet client (vpn only), version 5.2.0.0591. We have configured an SSL-VPN connection. When we click on the " connect" button, the status progresses all the way to 98% and then hangs. We have disabled the windows firewall, do not have any anti virus software installed, no group policies are being applied, and no other applications are running when we attempt to make the VPN connection. Thanks for helping!

denniswong34 · ‎11-07-2014

Hi All,

I just fix it by apply this fix and re-install fortigate client.

https://skydrive.live.com/redir?resid=86BDD34D41D3E179!2065&authkey=!AAeyjPB4O4uVxek

You may find the detail from this forums. Hope this could help you all. Thanks.

https://supportforums.cisco.com/discussion/11682811/anyconnect-msi-installation-failed-windows-7

View solution in original post

greylander · ‎01-27-2016

Hi,

I seem to be experiencing this problem, or very similar problem.

Forticlient hangs at 98% while connecting. But this only happen occasionally -- especially if the connect dropped for some reason and I try to connect again (possibly every time this happens).

I am able to get Forticlient to connect if I reboot my machine. So maybe this is not the identical problem discussed here. Sometimes it gives the "You already have an open SSL VPN connection" warning, but not always. Either way, it stops at 98%, after a minute or so, it just clears the login fields of the forticlient window as if nothing had ever happened.

Rebooting my machine "resets" something and makes connection possible. But this is a frustrating workaround.

Is there a process or service I should be able to restart that would have the same effect as rebooting?

View solution in original post

JulianDorl · ‎09-09-2014

If you see this you have to delete the fortissl Connection and go to Programs and Features, select FortiClient and click on repair.

JulianDorl · ‎09-09-2014

After that you have to do these changes:

FKribs · ‎09-09-2014

Once we delete " fortissl" and run a repair, the red " modem Removed- Unavailable device ()" returns, and is the only item listed.

rwpatterson · ‎09-09-2014

Read the release notes. Last time I checked, IE11 is not officially supported using the web install of the SSL VPN client. I would download and install the stand alone (older) SSL VPN client.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

FKribs · ‎09-09-2014

I would like to reiterate: we were provided the SSL VPN Client from a third party software company, so we are unaware of any release notes. We are trying to get FortiNet VPN running on Windows Server 2012 R2, which comes with Internet Explorer 11 as the base version of the browser. We don' t believe it is possible to downgrade from this base version. We are running version 4.0.2294 of the 64bit SSL VPN (Only) client.

rwpatterson · ‎09-10-2014

What FW level is your FGT running? As a test, try to connect to 96.232.132.175. user & pass are ' test' , lower case. That' s a test unit I have running 4.3.15. See if you get past the hump. If you do, check your FW config.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

jlozen · ‎12-11-2014

FKribs wrote:
I would like to reiterate: we were provided the SSL VPN Client from a third party software company, so we are unaware of any release notes. We are trying to get FortiNet VPN running on Windows Server 2012 R2, which comes with Internet Explorer 11 as the base version of the browser. We don' t believe it is possible to downgrade from this base version. We are running version 4.0.2294 of the 64bit SSL VPN (Only) client.

As a minor note not directly related to the issue, but could be useful for a work around. It IS possible to "downgrade" IE11. If you open windows update and then click on installed updates, you can uninstall the IE11 update to revert to an older version.

JulianDorl · ‎09-10-2014

I would say the 3rd party company should support you. You can also try using a newer version (5.2) of the FortiClient. You can find it here: http://forticlient.com/

FKribs · ‎09-10-2014

We preformed this test connection and, unfortunately, still weren' t able to get past " Status: Connecting...(98)" .

FKribs · ‎09-10-2014

We also tried the full version of the fortient client (version 5.2.0.0591) and had the same issue stalling at 98%. We don' t have any access to the serverside/gateway to find out what version of firmware is running. Yes, we thought also that the third party company SHOULD support us, but they have extremely unhelpful.

Than you so much for taking the time to help us troubleshoot this!