Troubleshooting common issues

To troubleshoot no visible Agentless VPN menus in the GUI:

Enable the feature visibility in the GUI or CLI.

In the GUI:

1. Go to System > Feature Visibility.

2. In the Core Features section, enable Agentless VPN.

3. Click Apply.

In the CLI:

config system settings
    set gui-sslvpn enable
end

To troubleshoot no visible Agentless VPN options in the GUI or CLI:

config system global
    set sslvpn-web-mode enable
end

To troubleshoot getting no response from the Agentless VPN URL:

1. Go to VPN > Agentless VPN Settings.

   1. Confirm that Agentless VPN is enabled.

   2. Check the Agentless VPN port assignment.

   3. Check the Restrict Access setting to ensure the host you are connecting from is allowed.

2. Go to Policy > Firewall Policy.

   1. Check that the policy for Agentless VPN traffic is configured correctly.

   2. Check the URL you are attempting to connect to. It should follow this pattern:

      https://<FortiGate IP>:<Port>

   3. Check that you are using the correct port number in the URL. Ensure FortiGate is reachable from the computer.

      ping <FortiGate IP>

   4. Check the browser has TLS 1.1, TLS 1.2, and TLS 1.3 enabled.

To troubleshoot FortiGate connection issues:

1. Check the Release Notes to ensure that the web browser version is compatible with your version of FortiOS.
2. Check that your browser has TLS 1.1 and TLS 1.2 enabled.

To troubleshoot Agentless VPN connections shutting down after a few seconds:

This might occur if there are multiple interfaces connected to the Internet, for example, SD-WAN. This can cause the session to become “dirty”. To allow multiple interfaces to connect, use the following CLI commands.

If you are using a FortiOS 6.0.1 or later:

config system interface
  edit <name>
    set preserve-session-route enable
  next
end