FortiClient VPN | Fortigate SSL VPN

[Malakovitz]

Hello,

I have many accesses to companies through FortiClient VPN. However i have a problem.

The problem is that i connect to the VPN with the correct credentials and i cannot scan the internal network.

This is my ipconfig command output:

Ethernet adapter Ethernet 5:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::9388:a124:585a:79ba%17
IPv4 Address. . . . . . . . . . . : 192.168.105.129
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :

I it says VPN Connected however i don't get a gateway the IP Address that the FortiClient shows is this: 192.168.105.129 so is the correct IP.

Any ideas what i can do to fix that ?

Thank you!

 

[wiseguy01]

route print in CMD

 

[leakscorp]

or

Get-NetRoute

in powershell

 

[simplestop]

the IP Address that the FortiClient shows is this: 192.168.105.129

That is the ip of your computer in internal network, not the ip of domain controller or other stuff

In this case we see the range
10.102.96.0 - 255.255.255.0
this means that in the scanner we will write it like this
like this:
10.102.96.0 - 10.102.96.255
If we saw a picture like this:
10.102.0.0 - 255.255.0.0
Then we would write in the scanner
10.102.0.0 - 10.102.255.255

 

[developer_ing]

ipconfig /all and search FortiClient interface - DNS

 

[Fluxter]

look to the subnets in fortigate to see which subnets you can scan

 

[Zodiac]

Какие инструменты вы используете для сканирования сетки

 

[Malakovitz]

That is the ip of your computer in internal network, not the ip of domain controller or other stuff

In this case we see the range
10.102.96.0 - 255.255.255.0
this means that in the scanner we will write it like this
like this:
10.102.96.0 - 10.102.96.255
If we saw a picture like this:
10.102.0.0 - 255.255.0.0
Then we would write in the scanner
10.102.0.0 - 10.102.255.255
Посмотреть вложение 50017

Yes i know that this is not my IP and i know that basic subneting The problem is that the DHCP doesn't even give me the gateway.

 

[Malakovitz]

or

Get-NetRoute

in powershell

This is my route print

 

[Malakovitz]

look to the subnets in fortigate to see which subnets you can scan

I just have SSL VPN access not access to the admin panel

 

[Malakovitz]

route print in CMD

 

[Malakovitz]

ipconfig /all and search FortiClient interface - DNS

Ethernet adapter Ethernet 5:

Connection-specific DNS Suffix . :
Link-local IPv6 Address . . . . . : fe80::9388:a124:585a:79ba%17
IPv4 Address. . . . . . . . . . . : 192.168.105.129
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :

This is the ipconfig. It doesn't change anything with ipconfig /all

 

[kiloton]

Вы совсем ох...ли тут обсуждать route print? Скрипт киддисы,
когда же вы наконец то гуглить тривиальные вещи научитесь?
Потом лезьте в сетки. Представляю как над вами угорают NOC
когда вы команду не умеете прописать, хоть и первичный доступ
через брата секретарши в бекап биллинга у вас был.

 

[c0v1d21]

На многих доступах не видно сетку из за политик фаерволла, или просто нет внешнего vpn интерфейса, route print не поможет, читайте мануал от Fortinet.