Troubleshooting Tip: New CLI filtering commands to debug SSL VPN available in v5.4

[jintrah_FTNT]

Description

New commands have been introduced in FortiOS 5.4 to filter SSL VPN debugging.

Solution

# diagnose vpn ssl debug-filter ?

clear        Erase the current filter.
list         Display the current filter.
src-addr4    IPv4 source address range.
src-addr6    IPv6 source address range.
vd           Name of virtual domain.
negate       Negate the specified filter parameter.

Once the filter has been set, SSLVPN debugs can be enabled using the commands:

#diag debug application sslvpn -1
#diag debug enable