In larger environments, SSL VPN setups can grow to be complex, including different user groups with the different portals in the SSL VPN settings, and many different policies for SSL VPN.Īt this point, with multiple groups in use, the way FortiGate authenticates SSL VPN users can be a bit difficult to understand intuitively. An SSL VPN policy exists (a policy with the SSL VPN tunnel interface as source interface) this will require a user or group to be included in the source options A default portal is configured (under 'All other users/groups' in the SSL VPN settings) SSLVPN is set to listen on at least one interface

This requires the following configuration: This article describes a basic understanding of how FortiGate SSL VPN authentication works how FortiGate determines what groups to check a user against, and common issues and misunderstandings about the process.įortiGate includes the option to set up an SSL VPN server to allow client machines to connect securely and access resources through the FortiGate.

Fortigate