sslvpn web访问资源跳转后显示

Connect server failed. 

跳转后的web输入框显示：https://hq.it-tech.xyz:10443/_proxy2/https/443/10.10.10.162/#/login

dis sslvpn session user 已匹配策略 route-inside

debug提示如下：

[Lute-F100-10.172.192.254-sslvpn-context-sslvpn]

[Lute-F100-10.172.192.254-sslvpn-context-sslvpn]%Aug 15 13:45:56:682 2023 Lute-F100-10.172.192.254 LOGIN/5/LOGIN_FAILED: shell failed to log in from 110.182.243.82.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_DEBUG_KSSL_HANDSHAKE: Receive: TLS 1.2ApplicationData [length 0230].

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_KSSL_PACKET: 

 17 03 03 02 30

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: Can't match url mapping resources: cOntextID=1.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: Matched the only context successfully.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: Can't match url mapping resources: cOntextID=1.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_AAA: Online check: SessiOnID=b01c0fd07000000.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_AAA: Online check: OnlineID=0x1d.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_PACKET: Received a request: method=GET; URL=/_proxy2/https/443/10.10.10.162/.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_PACKET: Packet classified to /_proxy2/.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_PACKET: WEBAC: Received a request. URL=/_proxy2/https/443/10.10.10.162/.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_FSM: WEBAC: Handle event START in Init state.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: User info: [pro=https, addr=10.10.10.162, dn=, port=443]URL list info: [name=eve, value=https://10.10.10.162/#/login, pro=https, addr=10.10.10.162, dn=, port=443]

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: WEBAC: can matched urllist.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: WEBAC: Not refer uri-acl.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: WEBAC: Matched Web resource result=matched, action=permit.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_FSM: WEBAC: State changed from Init to Connecting.

*Aug 15 13:46:00:065 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_EVENT: No SNAT pool is assigned to the context 0x1.

*Aug 15 13:46:00:066 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_DEBUG_KSSL_INFO: SSL_connect: before SSL initialization.

*Aug 15 13:46:00:066 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_DEBUG_KSSL_HANDSHAKE: Send: TLS 1.0Handshake [length 0041].

*Aug 15 13:46:00:066 2023 Lute-F100-10.172.192.254 SSLVPNK/7/SSLVPN_KSSL_PACKET: 

关键配置如下：

sslvpn context sslvpn

 vpn-instance google

 gateway sslvpn

 ip-tunnel interface SSLVPN-AC1

 ip-tunnel address-pool sslvpn mask 255.255.255.0

 ip-tunnel dns-server primary 8.8.8.8

 ip-tunnel dns-server secondary 8.8.4.4

 ip-route-list auto

 ip-route-list route-inside

  include 10.0.0.0 255.255.0.0

  include 10.10.10.0 255.255.255.0

  include 10.172.192.0 255.255.255.0

  include 172.17.100.0 255.255.255.0

  include 172.17.110.0 255.255.255.0

  include 172.17.150.0 255.255.255.0

  include 172.17.151.0 255.255.255.0

  include 172.17.152.0 255.255.255.0

 url-item eve

  url https://10.10.10.162/#/login

 url-list server

  heading Server

  resources url-item eve

 policy-group route

 policy-group route-all

  ip-tunnel access-route force-all

 policy-group route-inside

  ip-tunnel access-route ip-route-list route-inside

  resources url-list server

 default-policy-group route-inside

 aaa domain it-tech.xyz

 service enable