NSE4 · Question #163
An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down. Which of the following statements best describes how to
The correct answer is B. This FortiGate unit may have multiple Internet connections.. A common cause for a tunnel mode SSL VPN to briefly connect and then shut down is routing instability on the FortiGate, often occurring when the unit has multiple Internet connections.
Question
An issue could potentially occur when clicking Connect to start tunnel mode SSL VPN. The tunnel will start up for a few seconds, then shut down. Which of the following statements best describes how to resolve this issue?
Options
- AThis user does not have permission to enable tunnel mode.
- BThis FortiGate unit may have multiple Internet connections.
- CCheck the SSL adaptor on the host machine.
- DMake sure that only Internet Explorer is used.
How the community answered
(36 responses)- A6% (2)
- B81% (29)
- C3% (1)
- D11% (4)
Why each option
A common cause for a tunnel mode SSL VPN to briefly connect and then shut down is routing instability on the FortiGate, often occurring when the unit has multiple Internet connections.
If the user did not have permission to enable tunnel mode, the VPN would likely fail to establish at all, rather than connecting for a few seconds and then disconnecting.
If the FortiGate has multiple Internet connections (e.g., WAN interfaces) and thus multiple default routes, it might send the return traffic for the SSL VPN tunnel out the wrong interface, causing the tunnel to fail after initial establishment.
While client-side SSL adaptor issues can occur, they typically prevent the tunnel from forming entirely or cause immediate connection failures, not a brief connection followed by shutdown.
Browser choice is generally irrelevant for tunnel mode SSL VPN connection stability once the FortiClient software is installed and initiating the tunnel.
Concept tested: FortiGate SSL VPN tunnel mode troubleshooting (multiple WANs)
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-log-message-reference/311756/ssl-vpn-troubleshooting
Topics
Community Discussion
No community discussion yet for this question.