Problem Description
SSL VPN authentication error: Query gateway parameters fail
Process Analysis
Collect iNode detailed-level logs and packet captures. Through packet analysis, an error occurred during TLS negotiation due to inconsistent protocol versions between the client and server.
Reviewing the detailed packets, the client sent a Client Hello message using TLS 1.0, while the VPN gateway supports TLS 1.1/1.2/1.3.
Solution
The TLS protocol version configuration of iNode must be consistent with that supported by the VPN gateway. This case provides the modification method on the iNode side.
As shown below, in the SSL VPN connection, click More-Attribute and modify the client authentication protocol version to TLS1.2.
