13. Explaining SSL VPN host checking and its limitations (did NOT get it working)

[@KanchanaRandika]

Thanks Devin, after hours of struggle. I just found from the Fortinet support that the host-check now requires an EMS licensed ZTNA client. It's no longer part of the free SSL VPN.

[@Alkajazz]

I've enabled host checking but it doesn't even run the checks on the client computer.

[@DevinAdams]

Yeah, I couldn't get it to work either but I wasn't going to mess with GUIDs from the Windows registry.

[@daac84]

Hello, please confirm the firmware version used in the fortigate, and if it is licensed on the fortigate vm, this is because I understand and by some tests that it tries to make the downloaded vm images not support high encryption algorithms therefore updated browsers are not supported. config vpn ssl settings set algorithm high Thank you