Windows 10, Cisco VPN and Forti SSL VPN












1














When I connect both to Fortinet SSL VPN and to Cisco VPN at the same time, I cannot use network provided by Forticlient (i.e. my PC cant see remote hosts, ping timeouts). Cisco VPN network works fine though. When I disconnect Cisco VPN, I can ping network resources again, can connect via RDP ans so on. Reproducing in 100% cases, very easy to catch (but not to find underlying issue with skills I have).



Microsoft Windows 10 Pro x64

Forticlient 5.4.0.0780

Cisco Systems VPN Client 5.0.07.0440



My setup is mostly identical to what I had in previous Windows versions.
But there is one important difference related to CiscoVPN. It doesn't work in 10 out of the box so I followed this guide: http://www.gleescape.com/posts/2917.




  1. Installed Sonic VPN (it added DNE filter to all network adapters).

  2. Changed registry key "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCVirtA" as
    described (removed '@oem8.inf,%CVirtA_Desc%;' from beginning).


Same result with disabled Firewall and HIPS (provided by Comodo). Windows Firewall is always disabled.
I tried to make routing table same as without Cisco VPN (it adds routes when connected) bu it didn't help.



This problem is relevant only for Windows 10 (before and after Threshold 2). I had no problems with Windows 7 and Windows 8.1. Also I had to reinstall Windows 10 once but problem reoccurred after clean install (i.e. it didn't ever work on Windows 10 for me).
I browsed sqlite db "C:Program Files (x86)FortinetFortiClientlogsfclog.dat". There are no entries for the time when I reproduce issue.
There are no relevant windows events (I checked system and applications log).
The only event related to network:



<System>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<Provider Name="BROWSER" />
<EventID Qualifiers="16384">8033</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-01-24T08:57:04.695616600Z" />
<EventRecordID>36757</EventRecordID>
<Channel>System</Channel>
<Computer>GROBIK2015</Computer>
<Security />
</System>
<EventData>
<Data>DeviceNetBT_Tcpip_{64DBF048-CBFA-4B32-8851-B7CE04C06F91}</Data>
</EventData>
</Event>


I also tried to check network packets with WireShark but this is beyond my knowledge.



I don't know what else to check so I will appreciate any suggestions where to dig. I am not an expert with network technologies and VPN in particular but can understand instructions and use required tools.
Thanks in advance.



P.S. sorry if my English not correct sometimes.










share|improve this question













migrated from serverfault.com Jan 24 '16 at 12:11


This question came from our site for system and network administrators.




















    1














    When I connect both to Fortinet SSL VPN and to Cisco VPN at the same time, I cannot use network provided by Forticlient (i.e. my PC cant see remote hosts, ping timeouts). Cisco VPN network works fine though. When I disconnect Cisco VPN, I can ping network resources again, can connect via RDP ans so on. Reproducing in 100% cases, very easy to catch (but not to find underlying issue with skills I have).



    Microsoft Windows 10 Pro x64

    Forticlient 5.4.0.0780

    Cisco Systems VPN Client 5.0.07.0440



    My setup is mostly identical to what I had in previous Windows versions.
    But there is one important difference related to CiscoVPN. It doesn't work in 10 out of the box so I followed this guide: http://www.gleescape.com/posts/2917.




    1. Installed Sonic VPN (it added DNE filter to all network adapters).

    2. Changed registry key "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCVirtA" as
      described (removed '@oem8.inf,%CVirtA_Desc%;' from beginning).


    Same result with disabled Firewall and HIPS (provided by Comodo). Windows Firewall is always disabled.
    I tried to make routing table same as without Cisco VPN (it adds routes when connected) bu it didn't help.



    This problem is relevant only for Windows 10 (before and after Threshold 2). I had no problems with Windows 7 and Windows 8.1. Also I had to reinstall Windows 10 once but problem reoccurred after clean install (i.e. it didn't ever work on Windows 10 for me).
    I browsed sqlite db "C:Program Files (x86)FortinetFortiClientlogsfclog.dat". There are no entries for the time when I reproduce issue.
    There are no relevant windows events (I checked system and applications log).
    The only event related to network:



    <System>
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <Provider Name="BROWSER" />
    <EventID Qualifiers="16384">8033</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2016-01-24T08:57:04.695616600Z" />
    <EventRecordID>36757</EventRecordID>
    <Channel>System</Channel>
    <Computer>GROBIK2015</Computer>
    <Security />
    </System>
    <EventData>
    <Data>DeviceNetBT_Tcpip_{64DBF048-CBFA-4B32-8851-B7CE04C06F91}</Data>
    </EventData>
    </Event>


    I also tried to check network packets with WireShark but this is beyond my knowledge.



    I don't know what else to check so I will appreciate any suggestions where to dig. I am not an expert with network technologies and VPN in particular but can understand instructions and use required tools.
    Thanks in advance.



    P.S. sorry if my English not correct sometimes.










    share|improve this question













    migrated from serverfault.com Jan 24 '16 at 12:11


    This question came from our site for system and network administrators.


















      1












      1








      1







      When I connect both to Fortinet SSL VPN and to Cisco VPN at the same time, I cannot use network provided by Forticlient (i.e. my PC cant see remote hosts, ping timeouts). Cisco VPN network works fine though. When I disconnect Cisco VPN, I can ping network resources again, can connect via RDP ans so on. Reproducing in 100% cases, very easy to catch (but not to find underlying issue with skills I have).



      Microsoft Windows 10 Pro x64

      Forticlient 5.4.0.0780

      Cisco Systems VPN Client 5.0.07.0440



      My setup is mostly identical to what I had in previous Windows versions.
      But there is one important difference related to CiscoVPN. It doesn't work in 10 out of the box so I followed this guide: http://www.gleescape.com/posts/2917.




      1. Installed Sonic VPN (it added DNE filter to all network adapters).

      2. Changed registry key "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCVirtA" as
        described (removed '@oem8.inf,%CVirtA_Desc%;' from beginning).


      Same result with disabled Firewall and HIPS (provided by Comodo). Windows Firewall is always disabled.
      I tried to make routing table same as without Cisco VPN (it adds routes when connected) bu it didn't help.



      This problem is relevant only for Windows 10 (before and after Threshold 2). I had no problems with Windows 7 and Windows 8.1. Also I had to reinstall Windows 10 once but problem reoccurred after clean install (i.e. it didn't ever work on Windows 10 for me).
      I browsed sqlite db "C:Program Files (x86)FortinetFortiClientlogsfclog.dat". There are no entries for the time when I reproduce issue.
      There are no relevant windows events (I checked system and applications log).
      The only event related to network:



      <System>
      <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <Provider Name="BROWSER" />
      <EventID Qualifiers="16384">8033</EventID>
      <Level>4</Level>
      <Task>0</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2016-01-24T08:57:04.695616600Z" />
      <EventRecordID>36757</EventRecordID>
      <Channel>System</Channel>
      <Computer>GROBIK2015</Computer>
      <Security />
      </System>
      <EventData>
      <Data>DeviceNetBT_Tcpip_{64DBF048-CBFA-4B32-8851-B7CE04C06F91}</Data>
      </EventData>
      </Event>


      I also tried to check network packets with WireShark but this is beyond my knowledge.



      I don't know what else to check so I will appreciate any suggestions where to dig. I am not an expert with network technologies and VPN in particular but can understand instructions and use required tools.
      Thanks in advance.



      P.S. sorry if my English not correct sometimes.










      share|improve this question













      When I connect both to Fortinet SSL VPN and to Cisco VPN at the same time, I cannot use network provided by Forticlient (i.e. my PC cant see remote hosts, ping timeouts). Cisco VPN network works fine though. When I disconnect Cisco VPN, I can ping network resources again, can connect via RDP ans so on. Reproducing in 100% cases, very easy to catch (but not to find underlying issue with skills I have).



      Microsoft Windows 10 Pro x64

      Forticlient 5.4.0.0780

      Cisco Systems VPN Client 5.0.07.0440



      My setup is mostly identical to what I had in previous Windows versions.
      But there is one important difference related to CiscoVPN. It doesn't work in 10 out of the box so I followed this guide: http://www.gleescape.com/posts/2917.




      1. Installed Sonic VPN (it added DNE filter to all network adapters).

      2. Changed registry key "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCVirtA" as
        described (removed '@oem8.inf,%CVirtA_Desc%;' from beginning).


      Same result with disabled Firewall and HIPS (provided by Comodo). Windows Firewall is always disabled.
      I tried to make routing table same as without Cisco VPN (it adds routes when connected) bu it didn't help.



      This problem is relevant only for Windows 10 (before and after Threshold 2). I had no problems with Windows 7 and Windows 8.1. Also I had to reinstall Windows 10 once but problem reoccurred after clean install (i.e. it didn't ever work on Windows 10 for me).
      I browsed sqlite db "C:Program Files (x86)FortinetFortiClientlogsfclog.dat". There are no entries for the time when I reproduce issue.
      There are no relevant windows events (I checked system and applications log).
      The only event related to network:



      <System>
      <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <Provider Name="BROWSER" />
      <EventID Qualifiers="16384">8033</EventID>
      <Level>4</Level>
      <Task>0</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2016-01-24T08:57:04.695616600Z" />
      <EventRecordID>36757</EventRecordID>
      <Channel>System</Channel>
      <Computer>GROBIK2015</Computer>
      <Security />
      </System>
      <EventData>
      <Data>DeviceNetBT_Tcpip_{64DBF048-CBFA-4B32-8851-B7CE04C06F91}</Data>
      </EventData>
      </Event>


      I also tried to check network packets with WireShark but this is beyond my knowledge.



      I don't know what else to check so I will appreciate any suggestions where to dig. I am not an expert with network technologies and VPN in particular but can understand instructions and use required tools.
      Thanks in advance.



      P.S. sorry if my English not correct sometimes.







      vpn windows-10






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Jan 24 '16 at 11:12









      alxK

      613




      613




      migrated from serverfault.com Jan 24 '16 at 12:11


      This question came from our site for system and network administrators.






      migrated from serverfault.com Jan 24 '16 at 12:11


      This question came from our site for system and network administrators.
























          1 Answer
          1






          active

          oldest

          votes


















          0














          I had a similar issue after installing FortiClient 5.4. Could not ping or connect to Remote Desktop even though FortiCleint VPN would connect.



          After reading your issue and several unrelated ones, I uninstalled Dell SonicWall (only installed to support Cisco 5.0.07) and Cisco 5.0.07 and I was back in business. Not sure which of the two were the cause. Not sure how much this helps if you have to keep the old Cisco client, but perhaps will provide a avenue for searching for a workable solution.






          share|improve this answer





















          • Well, I don't need to uninstall Cisco VPN to have it working - Forti network becomes available immediately when I disconnect Cisco. But you're right, I need them both connected at the same time quite often.
            – alxK
            Feb 22 '16 at 13:51










          • @alxK Both of these clients throw default gateway to their respective VPN remote site. Whichever has the least priority determines which network remains accessible. So, you either need to provide routes yourself, that is, one subnet to one gw, another subnet to another gw, or find settings that would not make all traffic go through either VPN.
            – Vesper
            Jun 22 '17 at 15:02













          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "3"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1030629%2fwindows-10-cisco-vpn-and-forti-ssl-vpn%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes









          0














          I had a similar issue after installing FortiClient 5.4. Could not ping or connect to Remote Desktop even though FortiCleint VPN would connect.



          After reading your issue and several unrelated ones, I uninstalled Dell SonicWall (only installed to support Cisco 5.0.07) and Cisco 5.0.07 and I was back in business. Not sure which of the two were the cause. Not sure how much this helps if you have to keep the old Cisco client, but perhaps will provide a avenue for searching for a workable solution.






          share|improve this answer





















          • Well, I don't need to uninstall Cisco VPN to have it working - Forti network becomes available immediately when I disconnect Cisco. But you're right, I need them both connected at the same time quite often.
            – alxK
            Feb 22 '16 at 13:51










          • @alxK Both of these clients throw default gateway to their respective VPN remote site. Whichever has the least priority determines which network remains accessible. So, you either need to provide routes yourself, that is, one subnet to one gw, another subnet to another gw, or find settings that would not make all traffic go through either VPN.
            – Vesper
            Jun 22 '17 at 15:02


















          0














          I had a similar issue after installing FortiClient 5.4. Could not ping or connect to Remote Desktop even though FortiCleint VPN would connect.



          After reading your issue and several unrelated ones, I uninstalled Dell SonicWall (only installed to support Cisco 5.0.07) and Cisco 5.0.07 and I was back in business. Not sure which of the two were the cause. Not sure how much this helps if you have to keep the old Cisco client, but perhaps will provide a avenue for searching for a workable solution.






          share|improve this answer





















          • Well, I don't need to uninstall Cisco VPN to have it working - Forti network becomes available immediately when I disconnect Cisco. But you're right, I need them both connected at the same time quite often.
            – alxK
            Feb 22 '16 at 13:51










          • @alxK Both of these clients throw default gateway to their respective VPN remote site. Whichever has the least priority determines which network remains accessible. So, you either need to provide routes yourself, that is, one subnet to one gw, another subnet to another gw, or find settings that would not make all traffic go through either VPN.
            – Vesper
            Jun 22 '17 at 15:02
















          0












          0








          0






          I had a similar issue after installing FortiClient 5.4. Could not ping or connect to Remote Desktop even though FortiCleint VPN would connect.



          After reading your issue and several unrelated ones, I uninstalled Dell SonicWall (only installed to support Cisco 5.0.07) and Cisco 5.0.07 and I was back in business. Not sure which of the two were the cause. Not sure how much this helps if you have to keep the old Cisco client, but perhaps will provide a avenue for searching for a workable solution.






          share|improve this answer












          I had a similar issue after installing FortiClient 5.4. Could not ping or connect to Remote Desktop even though FortiCleint VPN would connect.



          After reading your issue and several unrelated ones, I uninstalled Dell SonicWall (only installed to support Cisco 5.0.07) and Cisco 5.0.07 and I was back in business. Not sure which of the two were the cause. Not sure how much this helps if you have to keep the old Cisco client, but perhaps will provide a avenue for searching for a workable solution.







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Jan 30 '16 at 19:13









          Chris

          1




          1












          • Well, I don't need to uninstall Cisco VPN to have it working - Forti network becomes available immediately when I disconnect Cisco. But you're right, I need them both connected at the same time quite often.
            – alxK
            Feb 22 '16 at 13:51










          • @alxK Both of these clients throw default gateway to their respective VPN remote site. Whichever has the least priority determines which network remains accessible. So, you either need to provide routes yourself, that is, one subnet to one gw, another subnet to another gw, or find settings that would not make all traffic go through either VPN.
            – Vesper
            Jun 22 '17 at 15:02




















          • Well, I don't need to uninstall Cisco VPN to have it working - Forti network becomes available immediately when I disconnect Cisco. But you're right, I need them both connected at the same time quite often.
            – alxK
            Feb 22 '16 at 13:51










          • @alxK Both of these clients throw default gateway to their respective VPN remote site. Whichever has the least priority determines which network remains accessible. So, you either need to provide routes yourself, that is, one subnet to one gw, another subnet to another gw, or find settings that would not make all traffic go through either VPN.
            – Vesper
            Jun 22 '17 at 15:02


















          Well, I don't need to uninstall Cisco VPN to have it working - Forti network becomes available immediately when I disconnect Cisco. But you're right, I need them both connected at the same time quite often.
          – alxK
          Feb 22 '16 at 13:51




          Well, I don't need to uninstall Cisco VPN to have it working - Forti network becomes available immediately when I disconnect Cisco. But you're right, I need them both connected at the same time quite often.
          – alxK
          Feb 22 '16 at 13:51












          @alxK Both of these clients throw default gateway to their respective VPN remote site. Whichever has the least priority determines which network remains accessible. So, you either need to provide routes yourself, that is, one subnet to one gw, another subnet to another gw, or find settings that would not make all traffic go through either VPN.
          – Vesper
          Jun 22 '17 at 15:02






          @alxK Both of these clients throw default gateway to their respective VPN remote site. Whichever has the least priority determines which network remains accessible. So, you either need to provide routes yourself, that is, one subnet to one gw, another subnet to another gw, or find settings that would not make all traffic go through either VPN.
          – Vesper
          Jun 22 '17 at 15:02




















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Super User!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.





          Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


          Please pay close attention to the following guidance:


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1030629%2fwindows-10-cisco-vpn-and-forti-ssl-vpn%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Plaza Victoria

          Puebla de Zaragoza

          Musa