findabad.blogg.se

> If a SSL-VPN tunnel connection is terminated with the log message 'Deleted to make way for another session', then apply the below commands:

Refer to the below document for more information: To allow multiple interfaces to connect, use the following CLI commands. This can cause the session to become 'dirty'. > The issue might occur if there are multiple interfaces connected to the Internet, for example, SD-WAN. Use a wired connection if possible in the user's network. > See if the end-user is connected using a Wired or Wireless connection on their network. > Perform basic configuration checks on the FortiGate pertaining to SSL-VPN. > Look into the crashlogs on the FortiGate. Below is an article on how to enable DTLS for SSL-VPN connections. > For higher-end units, there could be IPv4 access control lists, which could be checked and disabled for testing. > Check the configuration on FortiGate for any traffic shapers applied on the WAN interface, DoS policies, and local-in policies created.Īdjust it as per the requirement or disable it while testing. Use a test computer in the client's network with no other 3rd party applications if possible.

> See if there are any applications on the client computer which could conflict with FortiClient (For example Cisco's Anyconnect). whether all users or some users are having the SSL-VPN disconnection issue. > Understand the scope of the issue, i.e. This article describes random or intermittent disconnections of the SSL-VPN tunnel to the FortiGate when connected with FortiClient.īelow are some of the things to keep in mind when working with SSL-VPN disconnection issues: