When an SSL-VPN gets disconnected without the user intentionally
pressing the Disconnect button, shutting down the PC or such,
FortiAnalyzer logs the reason for the SSL tunnel shutdown either as
"Lost the connection" or as "User requested termination...
FortiGate 6.0.6 FortiClient 6.2.6.0951 When I scp copy a file from my
laptop at home over an SSL VPN to a server at work, scp reports that the
file is copied 100%, and then hangs. I.e., the command prompt does not
return and 'netstat -an' shows that ...
Fortigate: 6.0.6 This is related to
https://kb.fortinet.com/k....do?externalID=FD39129 and to
https://kb.fortinet.com/k....do?externalID=FD48982 We have defined a
custom host check to only allow access from systems that are member of
our domain, that...
FortiGate 6.0.6 We currently have this config: config vpn ssl web
host-check-software edit "OUR-host-check-windows" set os-type windows
set type fw config check-item-list edit 1 set type registry set target
"HKLM\\SYSTEM\\CurrentControlSet\\Services\...
I'm testing the FortiClient VPN app V6.4.3.0462 on Android. When I login
to the VPN, I get a pop-up warning that the site's certificate is
untrusted. According to the FortiClient Android Administration Guide
(https://docs.fortinet.com...onnecting-to-...
Yes, I read it. It's the first link in my post. Point 8 states "If GUID
differs then host check will fail. The version check will pass as long
as the application version is equal to or greater than what is defined
in the custom host check definition ...
In case anyone else wants to change this, you can change it in FortiGate
via System > Replacement Messages. Scroll down to SSL-VPN and edit
SSL-VPN Login Page.
Thanks for your reply, Emnoc. That's not going to be evident for end
users with limited IT knowledge. :-( Too bad they removed the Import
Certificate option. That looked a lot more user friendly.
