Hot!Fortigate SSL VPN disconnects between 2-5 minutes suddenly

Author
Ranithd
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/05/03 02:46:56
  • Status: offline
2017/10/11 07:48:10 (permalink) 5.6
0

Fortigate SSL VPN disconnects between 2-5 minutes suddenly

Dear all, 
Im using fortigate 60E with 5.6 firmware. All users can work only for few minutes & the VPN suddenly gets disconnected. No error comes in. I have installed forticlient 5.6 aas well, but it also give same results
#1
Agent 1994
Silver Member
  • Total Posts : 65
  • Scores: 7
  • Reward points: 0
  • Joined: 2016/08/03 09:15:51
  • Location: Rosario, Santa Fe, Argentina
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2017/10/11 08:20:46 (permalink)
0
Do you have two wan interfaces?
#2
Ranithd
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/05/03 02:46:56
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2017/10/11 08:32:53 (permalink)
0
I  have 4M ILL with public IP + 2 other Internet links. load balanced between 3 of them as  ILL(50%)  & 25%  25% .
VPN policy works through ILL
#3
Agent 1994
Silver Member
  • Total Posts : 65
  • Scores: 7
  • Reward points: 0
  • Joined: 2016/08/03 09:15:51
  • Location: Rosario, Santa Fe, Argentina
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2017/10/17 11:31:08 (permalink)
5 (2)
Sorry for the delay, i was *way* busy 
I had a similar problem with SD-WAN where i work: replies from the ssl vpn were load balanced among our links, i observed traffic going out to wan2 with wan1's IP.
 
It was solved with this:
 
config vpn ssl settings
set route-source-interface enable
end
#4
Bonus45
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2015/02/17 09:57:13
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/03/19 19:20:27 (permalink)
0
Hey, thanks agent.  I was setting up a new vpn tonight and couldn't figure out the frequent disconnects.  Your listed fix did the trick.
 
Thanks!
#5
Juma
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/06 06:00:45
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/06 06:06:30 (permalink)
0
Hi All, 
 
I have similar issue, I have FGT 1200D version 5.6.0. 
I have two ISP links, and I have set up SD-WAN. 
I tried the above solution but it still does not work. I have also in put the command below
 
config vpn ssl settings 
set source-interface "ISP"  where ISP is the desired link. 
 
Still doesn't work. Anybody figured it out? 
#6
Agent 1994
Silver Member
  • Total Posts : 65
  • Scores: 7
  • Reward points: 0
  • Joined: 2016/08/03 09:15:51
  • Location: Rosario, Santa Fe, Argentina
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/06 10:11:56 (permalink)
0
Did you try "set route-source-interface enable"?
#7
Juma
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/06 06:00:45
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/06 22:13:21 (permalink)
0
Hi Agent 1994,
 
Yes I did. Still disconnecting after a few minutes. 
#8
Ashu
Gold Member
  • Total Posts : 130
  • Scores: 10
  • Reward points: 0
  • Joined: 2015/04/17 04:33:45
  • Location: Muscat,Oman
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/07 02:28:03 (permalink)
0
Hi 
 
Is there any drops in your internet connection  and how many links added for the SSL VPN  .Try to check the logs in the forticlient .
 
Regds,
 
Ashik
#9
Juma
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/06 06:00:45
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/10 23:55:33 (permalink)
0
Hi Ashik, 
 
No drops in the internet connectivity , I had suspected that early one. 
For SSL VPN we only use one link.
I uploaded the logs to Fortinet support, they suggested a but in 5.6 which an upgrade might sort. 
 
 
That's the next course of action as of now. 
#10
Ashu
Gold Member
  • Total Posts : 130
  • Scores: 10
  • Reward points: 0
  • Joined: 2015/04/17 04:33:45
  • Location: Muscat,Oman
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/11 00:20:30 (permalink)
0
HI,
 
Normally if you have More than one Wan link ..Below command will help you to solve disconnection issue .
 
set route-source-interface .
 
Just check if you have already run this command .
 
Regds,
 
Ashik
#11
Juma
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/09/06 06:00:45
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/11 00:31:37 (permalink)
0
Yes I did. Does not work 
 
Also this command below 
 
set source-interface "ISP"  where ISP is the desired link.
#12
Ashu
Gold Member
  • Total Posts : 130
  • Scores: 10
  • Reward points: 0
  • Joined: 2015/04/17 04:33:45
  • Location: Muscat,Oman
  • Status: offline
Re: Fortigate SSL VPN disconnects between 2-5 minutes suddenly 2018/09/11 01:11:52 (permalink)
0
Hi,
 
Try this 
 

Tunnel-mode connection shuts down after a few seconds

This issue can occur when there are multiple interfaces connected to the Internet (for example, SD-WAN). This can cause the session to become “dirty.” To fix this, you must allow multiple interfaces to connect without issue.
If you are using a FortiOS 6.0.1 or later, use the following CLI command:
config system interface
edit <name>
set preserve-session-route enable
next
end
If you are using a FortiOS 6.0.0 or earlier, use the following CLI command:
config vpn ssl settings
set route-source-interface enable
end
 Regds,
Ashik
#13
Jump to:
© 2018 APG vNext Commercial Version 5.5