FortiOS supports verifying client certificates with RSA-PSS series of signature algorithms, which causes problems with certain clients.

Add attribute to control signature algorithms related to client authentication (only affects TLS 1.2):

config vpn ssl settings
    set client-sigalgs {no-rsa-pss | all}
end