Cisco Asa block vpn trafic

[cemil.heyderov]

i use Cisco Asa firewall. users from Lan side Asa  must connect Fortinet via fortinet client. some times users connect via fortinet client but some times cannot connect.but from other  places where there is not cisco asa users connect normaly.

[Mohammed al Baqari]

Hi,

Enable terminal monitor on ASA and see what happens when its failing to
connect. Ensure that logging monitor informational is enabled

Otherwise you can use capture with packet trace enable to see what is
happening when packets are arriving are failing.

**** please remember to rate useful posts

[MHM Cisco World]

are VPN use IKEv2 ?

[cemil.heyderov]

Yes

[MHM Cisco World]

Do you config pfs and config dh group under phase2?