Windows 10: TLS version mismatch error with VPN client.

I am getting a TLS version mismatch error when making VPN connections through FortiClient. I have multiple VPN connections through FortiClient to different servers and they all worked until recently. I now get the attached error message when attempting to connect to any of these VPN connections, indicating a TLS mismatch error. I know the VPN servers are not down currently as another user is able to connect with the same settings and credentials.This error has happened several times, and each time I am unable to connect to any of my VPN connections through FortiClient for a day or two. In the

:)

 

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.

 

How to connect Azure Point to Site VPN to a Windows 7 OS client?

Hi,
Is it possible to still configure Azure Point to site VPN for Windows 7OS as of 21-7-2022?
I installed the VPN client and place/install all the necessary certs in the Windows 7 PC but keep getting Error 798 unable to verify/locate certificate.

The VPN client works perfectly fine for a Windows 10 OS, so I believe there is no issues with the guide provided by Microsoft.

I have tried
- All steps listed in the troubleshooting guide (Except creating an entirely new Virtual Network)
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-troubleshoot-vpn-point-to-site-connection-problems

- Enabling TLS 1.1 and TLS 1.2

I notice that the article below does not list Windows 7 as a supported OS.

Azure VPN Gateway FAQ

Could anyone kindly enlighten me if this is possible or share with me alternate ways to enable Azure Point to Site VPN on a Windows 7 OS PC.

Thanks in advance.

 

How to Fix FortiClient unable to establish the VPN connection. The VPN server may be unreachable (-8), (-14), (-6008), (-5), (-20199)

Whenever i try to connect to FortiClient VPN in Windows 10 computer, it fails to connect and saying ‘FortiClient unable to establish the VPN connection. The VPN server may be unreachable’ along with some error codes (-8), (-14), (-6008), (-5), (-20199), or other error codes on error window. This error codes indicates unable to connect to FortiClient SSL VPN in computer for some reasons.



Is there any solutions to fix these FortiClient errors problems?

However, there is some workaround solutions available on the web where How to Fix FortiClient unable to establish the VPN connection. The VPN server may be unreachable page mentioned some effective solutions. Here is the solutions.

Method 1: Change TLS version

This issue can be occurred due to mismatch TLS version in computer. You can fix the issue by changing TLS version to fix.

Step 1: Open ‘Internet Options’ via Windows Search Box and in the opened window, click ‘Advanced’ and scroll down to check ‘TLS version’

Step 2: If ‘TLS 1.2’ version is selected on client end, you can change it to ‘TLS 1.1’ and/or other TLS 1.0 on FortiGate end, and it is done. Check if the issue is resolved.



Method 2: Reinstall Miniport Driver

You can also try to fix the issue by reinstalling Miniport driver in computer.

Step 1: Open ‘Device Manager’ app in Windows PC via Windows Search Box and click ‘View’ menu and select ‘Show Hidden Devices’

Step 2: Now, expand ‘Network Adapters’ category, there should be series of WAN Miniport driver: IP, IPv6, PPTP, IKEv2, etc. If Miniport driver is not visible, you will have to reinstalled.

Step 3: Open your browser and visit Microsoft Official website, search for ‘devcon.exe’ and download & install this file in computer

Step 4: You can find the different miniport driver version name relating to your OS in “C:\Windows\inf\netrasa.inf”. Depending on Windows OS version, this path will be different.

Step 5: Now, press ‘Windows + R’ keys on keyboard, type ‘cmd’ in ‘Run’ window and press ‘CTRL + SHIFT + ENTER’ keys on keyboard to open ‘Command Prompt as Administrator’

Step 6: Type the following commands and hit ‘Enter’ key after each to execute.

Step 7: Once executed, restart your computer and check if the issue is resolved.