azure vpn client: an attemp was maded to access a socket in a way forbidden by its access permissions

Jerry 11

I'm using azure vpn client for the first time and I always get this error:

The app has been allowed to through the firewall. I have another PC can connect the vpn successfully so I think there is some settings wrong on this PC.

Please provide some help.
Thanks.

GitaraniSharma-MSFT 47,416 Reputation points Microsoft Employee

2022-11-22T12:25:12.027+00:00

Hello @Jerry ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you are unable to connect to Azure point to site VPN and getting the following error "Connecting to AAD Endpoint failed with exception : an attempt was made to access a socket in a way forbidden by its access permissions".

Client Credentials on the VPN client diagnostics check to see if the Azure Active Directory authentication endpoint is reachable.
If the VPN Client is not able to make the connection, we should validate if the client machine has internet access and firewall does not block access to Port 443 on the VPN Server.

But you mentioned that the app has been allowed to through the firewall and is working fine on another machine.

Could you please collect the VPN client log files and share the same for further investigation?
To collect VPN client logs files : https://learn.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-ad-vpn-client#logfiles

Regards,
Gita
Jerry 11 Reputation points

2022-11-23T02:46:33.007+00:00

Hi @GitaraniSharma-MSFT ,

Thanks for the replying, here is the vpn log 263239-azurevpnclient.log. Please check if that is helpful. Thank you!
GitaraniSharma-MSFT 47,416 Reputation points Microsoft Employee

2022-11-24T12:07:15.06+00:00

Hello @Jerry ,

The VPN client logs do not have much details that could help in troubleshooting this issue. And the issue is specific to the client machine you are using. So, we may need to look into the backend logs and would need access to your resources for further investigation. Hence, if you have a support plan, I request you file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Regards,
Gita
GitaraniSharma-MSFT 47,416 Reputation points Microsoft Employee

2022-11-30T09:31:49.24+00:00

Hello @Jerry ,

Could you please provide an update on this post?
In case you need help with a one-time free technical support, please send us an email as advised in the private message.

Regards,
Gita
Jerry 11 Reputation points

2022-12-01T06:41:46.773+00:00

I have sent the email, please check.
Thanks.
Rodion Sychev 0 Reputation points

2023-05-05T00:57:48.1833333+00:00

Hi @GitaraniSharma-MSFT

I am experiencing the same issue. Could you give me a hand in resolving it?
I have attached a log file for your reference.AzureVpnClient.log
GitaraniSharma-MSFT 47,416 Reputation points Microsoft Employee

2023-05-29T12:59:19.4333333+00:00

Hello @Rodion Sychev ,

Apologies for the delay in response.

"An attempt was made to access a socket in a way forbidden by its access permissions" is a Windows socket error which can occur when the your VPN client application is trying to open a port already used by another service/application. This error can also occur if you have a firewall that is blocking the port 443.

Refer: https://learn.microsoft.com/en-us/windows/win32/winsock/windows-sockets-error-codes-2

The logs shared by you don't provide much information. To troubleshoot the exact issue here, we will need a specialized 1:1 session, where a support engineer can have a screen share session to pinpoint the issue. Hence, if you have a support plan, I request you file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Regards,

Gita