{"id":26,"date":"2021-12-15T20:15:00","date_gmt":"2021-12-16T04:15:00","guid":{"rendered":"https:\/\/172.105.20.94\/?p=26"},"modified":"2022-04-16T16:54:02","modified_gmt":"2022-04-17T00:54:02","slug":"configure-host-check-for-sslvpn-connections-on-fortigate","status":"publish","type":"post","link":"https:\/\/tungle.ca\/?p=26","title":{"rendered":"Configure host-check for SSLVPN connections on FortiGate"},"content":{"rendered":"\n<p style=\"line-height:1\">This is a diagram to do a host-check SSLVPN connections lab.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"520\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-12.png\" alt=\"\" class=\"wp-image-27\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-12.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-12-300x160.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-12-768x410.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Enable tunnel-mode SSLVPN<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"936\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-13.png\" alt=\"\" class=\"wp-image-28\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-13.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-13-300x288.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-13-768x737.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"865\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-14.png\" alt=\"\" class=\"wp-image-29\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-14.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-14-300x266.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-14-768x681.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Enable host-check for Antivirus and Firewall enabled on Fortinet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"799\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-15.png\" alt=\"\" class=\"wp-image-30\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-15.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-15-300x246.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-15-768x629.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"189\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-16.png\" alt=\"\" class=\"wp-image-31\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-16.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-16-300x58.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-16-768x149.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"603\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-17.png\" alt=\"\" class=\"wp-image-32\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-17.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-17-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-17-768x475.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"603\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-18.png\" alt=\"\" class=\"wp-image-33\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-18.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-18-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-18-768x475.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Windows machine is up to date and Windows Firewall is enabled.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"791\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-19.png\" alt=\"\" class=\"wp-image-34\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-19.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-19-300x243.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-19-768x623.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Setup Forticlient on Windows machine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"791\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-20.png\" alt=\"\" class=\"wp-image-35\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-20.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-20-300x243.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-20-768x623.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"761\" height=\"703\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-21.png\" alt=\"\" class=\"wp-image-36\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-21.png 761w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-21-300x277.png 300w\" sizes=\"auto, (max-width: 761px) 100vw, 761px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Move to unpatched and disabled Windows firewall&#8217;s machine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"693\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-22.png\" alt=\"\" class=\"wp-image-37\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-22.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-22-300x213.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-22-768x546.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">SSLVPN connection is failed.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"668\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-23.png\" alt=\"\" class=\"wp-image-38\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-23.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-23-300x206.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-23-768x526.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Enabled Windows Firewall<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"523\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-24.png\" alt=\"\" class=\"wp-image-39\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-24.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-24-300x161.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-24-768x412.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Windows OS is not up to date.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"799\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-25.png\" alt=\"\" class=\"wp-image-40\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-25.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-25-300x246.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-25-768x629.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Creating an SSLVPN connection again, it was failed. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"651\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-26.png\" alt=\"\" class=\"wp-image-41\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-26.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-26-300x200.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-26-768x513.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<p style=\"line-height:1\">Checking on Forticlient log and Fortinet Web management console.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"375\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-27.png\" alt=\"\" class=\"wp-image-42\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-27.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-27-300x115.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-27-768x295.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"975\" height=\"791\" src=\"https:\/\/172.105.20.94\/wp-content\/uploads\/2021\/12\/image-28.png\" alt=\"\" class=\"wp-image-43\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-28.png 975w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-28-300x243.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2021\/12\/image-28-768x623.png 768w\" sizes=\"auto, (max-width: 975px) 100vw, 975px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>This is a diagram to do a host-check SSLVPN connections lab. Enable tunnel-mode SSLVPN Enable host-check for Antivirus and Firewall enabled on Fortinet. Windows machine is up to date and Windows Firewall is enabled. Setup Forticlient on Windows machine. Move to unpatched and disabled Windows firewall&#8217;s machine. SSLVPN connection is failed. Enabled Windows Firewall Windows [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,11],"tags":[14,13],"class_list":["post-26","post","type-post","status-publish","format-standard","hentry","category-fortigate","category-security","tag-fortinet","tag-security"],"_links":{"self":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/26","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=26"}],"version-history":[{"count":3,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/26\/revisions"}],"predecessor-version":[{"id":2883,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/26\/revisions\/2883"}],"wp:attachment":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=26"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=26"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=26"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}