Troubleshooting Tip: Fix 'Unable to connect to VPN...

Ade_23 · 12-03-2025

Description This article describes an issue where the FortiGate is unable to contact the RADIUS server even though the message-authenticator attribute is enabled on both the NPS server and the FortiGate. Scope FortiGate v7.2.10+, v7.4.5+ and v7.6.1+ ...

Ade_23 · 09-17-2025

Description This article describes where to procure the driver for a Fortinet-branded console cable included in the packaging. Scope Fortinet-branded USB-to-RJ45 console cable. Solution Fortinet device packages will often include a serial console cab...

Ade_23 · 07-30-2025

Description This article describes what changes to make to fix the error 'Unable to connect to VPN because tunnel configuration is unsupported' when connecting to IPsec VPNs from a MacOS device. Scope FortiClient (MacOS) 7.4.2. Solution When connecti...

Ade_23 · 04-02-2025

Description This article describes possible issues that result in No Proposal Chosen. 'Negotiate SA Error'. Scope FortiGate. Solution When troubleshooting IPsec VPN issues on the FortiGate, it is possible to receive No Proposal Chosen 'Negotiate SA E...

Ade_23 · 03-14-2025

Description This article explains why RCS (Rich Communication Services) text messaging between Apple and Android phones could be blocked by the FortiGate firewall. Scope FortiGate. Solution RCS (Rich Communication Services) messaging is a mobile carr...

Ade_23 · 10-31-2024

Hello @heyyo, Here is an article on enabling the sdwan interface: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-and-disable-SD-WAN-options/ta-p/193768 Do you have any interfaces in that zone as asked by @Ricky?

Ade_23 · 10-17-2024

Hello julianhaines, First of all, you do not need a rule to allow traffic in for SAML authentication. Please run a saml debug on the FortiGate to see if you get any output.? Also, please enable captive portal with IP 0.0.0.0 under authentication sett...

Ade_23 · 08-30-2024

Hello @boneyard . The short answer is No. there is no way to see the number of hits for routing objects. The best way to see if they are working is by the effect of their application.

Ade_23 · 08-16-2024

Hello, You cannot use the same SSO instance for SSLVPN and outbound authentication on the same FortiGate. They would have to be two different instances.

Ade_23 · 08-07-2024

Set up an ip pool for that internal box using the wan interface IP and see if it works

User Statistics

User Activity

Technical Tip: Cannot contact RADIUS server due to 'message-authenticator attribute not valid' error for Windows NPS server

Technical Tip: How to download the driver for the Fortinet RJ45-to-USB console cable