DC_FW501E_DMZ_01 # [18860:root:2e]allocSSLConn:289 sconn 0x7f791d086b00 (0:root)
[18860:root:2e]SSL state:before SSL initialization (103.238.68.180)
[18860:root:2e]SSL state:before SSL initialization (103.238.68.180)
[18860:root:2e]client cert requirement: no
[18860:root:2e]SSL state:SSLv3/TLS read client hello (103.238.68.180)
[18860:root:2e]SSL state:SSLv3/TLS write server hello (103.238.68.180)
[18860:root:2e]SSL state:SSLv3/TLS write change cipher spec (103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 early data (103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 early data:system lib(103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 early data (103.238.68.180)
[18860:root:2e]client cert requirement: no
[18860:root:2e]SSL state:SSLv3/TLS read client hello (103.238.68.180)
[18860:root:2e]SSL state:SSLv3/TLS write server hello (103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 write encrypted extensions (103.238.68.180)
[18860:root:2e]SSL state:SSLv3/TLS write certificate (103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 write server certificate verify (103.238.68.180)
[18860:root:2e]SSL state:SSLv3/TLS write finished (103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 early data (103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 early data:system lib(103.238.68.180)
[18860:root:2e]SSL state:TLSv1.3 early data:DH lib(103.238.68.180)
[18860:root:2e]SSL_accept failed, 5:(null)
[18860:root:2e]Destroy sconn 0x7f791d086b00, connSize=0. (root)
[18861:root:2e]allocSSLConn:289 sconn 0x7f791d086b00 (0:root)
[18861:root:2e]SSL state:before SSL initialization (103.238.68.180)
[18861:root:2e]SSL state:before SSL initialization (103.238.68.180)
[18861:root:2e]client cert requirement: no
[18861:root:2e]SSL state:SSLv3/TLS read client hello (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS write server hello (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS write change cipher spec (103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 early data (103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 early data:system lib(103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 early data (103.238.68.180)
[18861:root:2e]client cert requirement: no
[18861:root:2e]SSL state:SSLv3/TLS read client hello (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS write server hello (103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 write encrypted extensions (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS write certificate (103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 write server certificate verify (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS write finished (103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 early data (103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 early data:system lib(103.238.68.180)
[18861:root:2e]SSL state:TLSv1.3 early data (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS read finished (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS write session ticket (103.238.68.180)
[18861:root:2e]SSL state:SSLv3/TLS write session ticket (103.238.68.180)
[18861:root:2e]SSL state:SSL negotiation finished successfully (103.238.68.180)
[18861:root:2e]SSL established: TLSv1.3 TLS_AES_256_GCM_SHA384
[18861:root:2e]req: /remote/info
[18861:root:2e]req: /remote/login
[18861:root:2e]rmt_web_auth_info_parser_common:470 no session id in auth info
[18861:root:2e]rmt_web_get_access_cache:801 invalid cache, ret=4103
[18861:root:2e]User Agent: FortiSSLVPN ( IOS; SV1 [SV{v=02.01; f=04;}])
[18861:root:2e]get_cust_page:130 saml_info 0
[18861:root:2e]req: /remote/logincheck?&ajax=1&redir=/remote
[18861:root:2e]rmt_web_auth_info_parser_common:470 no session id in auth info
[18861:root:2e]rmt_web_access_check:720 access failed, uri=[/remote/logincheck],ret=4103,
[18861:root:2e]User Agent: FortiSSLVPN ( IOS; SV1 [SV{v=02.01; f=04;}])
[18861:root:2e]rmt_logincheck_cb_handler:1188 user 'dts01_attt' has a matched local entry.
[18861:root:2e]sslvpn_auth_check_usrgroup:2035 forming user/group list from policy.
[18861:root:2e]sslvpn_auth_check_usrgroup:2141 got user (0) group (1:0).
[18861:root:2e]sslvpn_validate_user_group_list:1638 validating with SSL VPN authentication rules (1), realm ().
[18861:root:2e]sslvpn_validate_user_group_list:1686 checking rule 1 cipher.
[18861:root:2e]sslvpn_validate_user_group_list:1694 checking rule 1 realm.
[18861:root:2e]sslvpn_validate_user_group_list:1705 checking rule 1 source intf.
[18861:root:2e]sslvpn_validate_user_group_list:1744 checking rule 1 vd source intf.
[18861:root:2e]sslvpn_validate_user_group_list:1841 rule 1 done, got user (0:0) group (1:0) peer group (0).
[18861:root:2e]sslvpn_validate_user_group_list:1959 got user (0:0), group (1:0) peer group (0).
[18861:root:2e]two factor check for dts01_attt: off
[18861:root:2e]sslvpn_authenticate_user:191 authenticate user: [dts01_attt]
[18861:root:2e]sslvpn_authenticate_user:198 create fam state
[18861:root:2e]fam_auth_send_req:583 with server blacklist: 
[18861:root:2e]fam_auth_send_req_internal:461 fnbam_auth return: 0
[18861:root:2e]fam_auth_send_req_internal:467 authentication OK
[18861:root:2e]fam_do_cb:654 fnbamd return auth success.
[18861:root:2e]SSL VPN login matched rule (1).
[18861:root:2e]User Agent: FortiSSLVPN ( IOS; SV1 [SV{v=02.01; f=04;}])
[18861:root:2e]rmt_web_session_create:741 create web session, idx[0]
       [18861:root:2e]login_succeeded:523 redirect to hostcheck
       [18861:root:2e]User Agent: FortiSSLVPN ( IOS; SV1 [SV{v=02.01; f=04;}])
       [18861:root:2e]rmt_hcinstall_cb_handler:456 remote check failed
[18861:root:0]sslvpn_internal_remove_one_web_session:2807 web session (root:dts01_attt:PVCB_VPN:103.238.68.180:0 1) removed for Server terminated session normally
[18861:root:2e]epollFdHandler,576, sconn=0x7f791d086b00[13,-1,-1,-1,-1], fd=13, event=25.
[18861:root:2e]epollFdHandler:646 s: 0x7f791d086b00 event: 0x19
[18861:root:2e]Destroy sconn 0x7f791d086b00, connSize=0. (root)