Dimitri Papadopoulos Orfanos

@govbetrieb Describe the platforms client-side (_openfortivpn_ and OS version for example). Also are you certain the VPN gateway supports VPN SSL?

Also what is the difference between old users (works) and new users (doesn't work)? Different VPN gateway? Different OS? Different version of openfortivpn?

If new users have to use 2FA (or SSO) and old users do not, that is a major difference. I would give [OpenConnect](https://gitlab.com/openconnect/openconnect) a try, but you need to build...

Ir's probably SAML rather than 2FA. See [Support SAML (Azure AD) auth with Fortinet ](https://gitlab.com/openconnect/openconnect/-/issues/356).

The only stability issue is that _ruff_ breaks CI from time to time because of new rules, unless of course you pin it down to a very specific version. The...

I've tried _FortiClient_ 4.4.2334 on a _Fedora_ virtual machine. I do see TCP Keep-Alive packets from the _Fedora_ machine to the _FortiGate_ appliance every 27 seconds,. I see these TCP...

Now the strange thing is that the _FortiGate_ appliance we connect to in the above example sends the following XML configuration: ``` ``` My understanding is that TCP Keep-Alive should...

This is related to DTLS, probably not relevant here: ``` ```

Yes, that was the test appliance. I've tried _FortiClient_ (the GUI program this time) with a different _FortiGate_ appliance and the result is identical: * I see the client sending...

The 27 seconds period is certainly built-in.