Duplicates Routes - SSL VPN

[prodigy]

Hi Everyone, 

I have an issue that we can't find any solution to it. 

We have FortiGate 100F, FortiOS v7.0.3 build0237 (GA).

I have 3-4 users that experiencing issues of duplicate routes in the routing table:

192.168.80.0/23  - Internal Network

172.16.80.0/24 - SSL VPN IP pool

192.168.136.197/32 - local gateway address. 

this effect on the access to internal resources, all the internal destined traffic is go through the  192.168.136.197 and not through 172.16.80.99.

after deleting manually the route it is working fine,

This is not happening to all users just for 3-4 right now (maybe the number will increase). 

Fortinet support claims that we don't have a license to Forticlient so they can't check at the user's end. 

They were connected to our Fortigate and saw that everything is set up as needed. 

Any suggestions?

Thank you :) 

[Toshi_Esumi]

So you're saying you had to manually remove the second route for 192.168.80.0/24. Does the route exist when SSL VPN is NOT up? And what version of FortiClient are they?

Toshi

[ISO1]

How did you resolve this issue? I'm having this pop up intermittently. Nothing has changed on the FortiGate, FortiClient is fully patched we get a random double route lower metric is through VPN, higher metric is through local gateway. Metric is being ignored and traffic is attempting to route through gateway. The duplicate route disappears and reappears