Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
OkanGemici
New Contributor

sslvpn_login_permission_denied

Hello,

 

I have Fortinet 60 F device. An error showed up while trying to connect via SSLVpn that too many bad login attempts.-455 . When I check firewall failed authentication parts I saw that there are a lot of attempts to login. I am adding the screenshot. What can I do as an emergency solution? Thanks in advance.

 

 

 

TopFailed Authentication Screen.png

15 REPLIES 15
OkanGemici

I created local users to make SSL VPN. There is an error while making SSL VPN. I wrote above actually.

 

""Hello,

 

I have Fortinet 60 F device. An error showed up while trying to connect via SSLVpn that too many bad login attempts.-455 . When I check firewall failed authentication parts I saw that there are a lot of attempts to login. I am adding the screenshot. What can I do as an emergency solution? Thanks in advance.""

OkanGemici
New Contributor

There are a lot of ssl login fail every minutes on the "Top Failed Authentication" page.

 

1.png

sjoshi

Are this user cfish validate user? which auth is failing 

If you have found a solution, please like and accept it to make it easily accessible to others.
Fortinet Certified Expert (FCX) | #NSE8-003459
Salon Raj Joshi
OkanGemici

I have no idea about the cfish user. I don't know whose user it is. I don't have a user like that. I see many logins that are not registered as local users, such as cfish. You can see in the picture. This also causes a warning of too many bad login attempts on the firewall when doing ssl vpn. Please examine the pictures I sent. I think there are too many attacks on my firewall device one after the other and I constantly get failed authentication.

sjoshi

yes you are getting brute force kind of attach to your FGT VPN

refer:-

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-secure-and-limit-an-SSL-VPN-unknown...

If you have found a solution, please like and accept it to make it easily accessible to others.
Fortinet Certified Expert (FCX) | #NSE8-003459
Salon Raj Joshi
OkanGemici
New Contributor

Is there anyone who can help ? How can i take support from fortinet ?

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors