Anyone else seeing RDS bookmarks fail on FortiOS 7.6.7?

The clean rebuilds make ordinary configuration drift less likely, especially since direct RDP bookmarks still work and the RDS servers appear to process the connection. I’d treat this as a possible compatibility or regression issue in the 7.6.7 agentless VPN path and keep the working and failing cases documented side by side.

Capture timestamps and relevant firewall and RDS logs for the same attempt, then ask support to investigate the specific version change. If you have a supported rollback option, that may be the practical workaround while the cause is being checked.

There’s some confusion in the discussion about the SSL VPN changes in newer FortiOS releases. The older tunnel mode and the newer agentless web access are not the same thing, so the removal of one does not by itself explain why an RDP bookmark fails here.

Since basic RDP bookmarks work, focus troubleshooting on what differs when the target is an RDS collection, including any collection redirection and the client settings passed through the bookmark. Don’t assume a setting found for an older version applies unchanged to 7.6.7.

One low-effort check is MTU and fragmentation on the path to the RDS hosts. A smaller MTU, such as 1400, has been suggested as a test. It’s not a confirmed fix for this particular failure, but it can help rule out a transport issue.

Change one variable at a time and compare the same bookmark attempt before and after. If it makes no difference, revert it rather than layering more speculative settings on top.

Also worth checking whether the disconnect depends on display settings. An issue with agentless RDP and high refresh-rate monitors has been reported on another 7.6 release, though that may be unrelated to the collection-specific failure here.

If possible, test with a basic display configuration and note whether the session closes immediately or only after the RDS redirect. That distinction could help narrow down which stage is failing.