This chapter explains how to use and configure the web portal features. This chapter is written for end users as well as administrators.

Fortinet Ssl Vpn Client
Fortinet Ssl Vpn Client Download Offline
Fortinet Ssl Vpn Client Certificate Authentication
Fortinet Ssl Vpn Client Download
Fortinet Ssl Vpn Client For Ubuntu

The following topics are included:

Connecting to the FortiGate unit

Web portal overview

Offering secure work from home options is a necessity for just about any business, and Fortinet's FortiGate firewall along with FortiClient Endpoint Protecti. You find the recommended maximum SSL VPN users for each model in the Maxium Values table available on docs.fortinet.com. IPsec on the other hand is typically used for site-to-site tunnels but is suitable for host-to-site settings as well. You will always need a software client for IPsec on the host which is this case could be again the FortiClient. Internet working fine, ping to 1.1.1.1 fails 25% of frames. Route on Client shows 0.0.0.0 192.168.x.1 which is the local gateway from employee. Internal dns is always reachable trough tunnel as suggested. Internet is working but every 5-8 Seconds the employee gets disconnects. If the user does disconnect the VPN, everything is working as its.

Portal configuration

Using the Bookmarks widget

Using the Quick Connection Tool

Using the SSL VPN virtual desktop

Using FortiClient

Connecting to the FortiGate unit

You can connect to the FortiGate unit using a web browser. The URL of the FortiGate interface may vary from one installation to the next. If required, ask your FortiGate administrator for the URL of the FortiGate unit, and obtain a user name and password. You can connect to the web portal using an Android phone, iPhone, or iPad. The FortiGate unit will display the content of the portal to fit the device’s screen.

In addition, if you will be using a personal or group security (X.509) certificate to connect to the FortiGate unit, your web browser may prompt you for the name of the certificate. Your FortiGate administrator can tell you which certificate to select.

To log into the secure FortiGate HTTP gateway

Using the web browser on your computer, browse to the URL of the FortiGate unit (for example, https://<FortiGate_IP_address>:443/remote/login). The FortiGate unit may offer you a self-signed security certificate. If you are prompted to proceed, select Yes.

A second message may be displayed to inform you that the FortiGate certificate distinguished name differs from the original request. This message is displayed because the FortiGate unit is attempting to redirect your web browser connection. You can ignore the message.

When you are prompted for your user name and password:
- In the Name field, type your user name.
- In the Password field, type your password.
Select Login.

The FortiGate unit will redirect your web browser to the FortiGate SSL VPN web portal home page automatically.

Web portal overview

After logging in to the web portal, the remote user is presented with a web portal page similar to the following:

Portal

Various widgets provide the web portal’s features:

Session Information displays the elapsed time since login and the volume of HTTP and HTTPS traffic, both inbound and outbound.
Quick Connection enables you to connect to network resources without using or creating a bookmark. l Download Forticlient provides access to the FortiClient tunnel application for various operating systems.
Bookmarks provides links to network resources. You can use the administrator-defined bookmarks and you can

add your own bookmarks.

While using the web portal, you can select the Help button to get information to assist you in using the portal features. This information displays in a separate browser window.

When you have finished using the web portal, select the Logout button in the top right corner of the portal window.

Portal configuration

The SSL VPN web portal enables users to access network resources through a secure channel using a web browser. Fortinet administrators can configure log in privileges for system users and which network resources are available to the users.

Portal configuration

The portal configuration determines what the user sees when they log in to the portal. Both the system administrator and the user have the ability to customize the SSL VPN portal.

There are three pre-defined default web portal configurations available:

full-access: Includes all widgets available to the user – Session Information, Tunnel Mode options, Connection Launcher, Remote Desktop, and Predefined Bookmarks. l tunnel-access: Includes Session Information and Tunnel Mode
web-access: Includes Session Information and Predefined Bookmarks

Fortinet Ssl Vpn Client

You can also create your own web portal to meet your corporate requirements.

Portal page
Create New	Creates a new web portal.
Edit	Select a portal from the list to enable the Edit option, and modify the portal configuration.
Delete	Removes a portal configuration. To remove multiple portals from the list, select the check box beside the portal names, then select Delete.
Name	The name of the web portal.
Ref.	Displays the number of times the object is referenced in other configurations on the FortiGate unit, such as security policies. To view the location of the referenced object, select the number in Ref. column. To view more information about how the object is used, select one of: View the list page for these objects – automatically redirects you to the list page where the object is referenced at. Edit this object – modifies settings within that particular setting that the object is referenced with. View the details for this object – similar to the log viewer table, contains information about what settings are configured within that particular setting that the object is referenced with.

Portal settings

A web portal defines SSL VPN user access to network resources. The portal configuration determines what SSL VPN users see when they log in to the unit. Both the Fortinet administrator and the SSL VPN user have the ability to customize the web portal settings. Portal settings are configured in VPN > SSL-VPN Portals.

The following settings are available, allow you to configure general and security console options for your web portal.

Portal

Portal Setting	Description
Name	The name for the portal.
Limit Users to One SSL-VPN Connection at a Time	You can set the SSL VPN tunnel such that each user can only log into the tunnel one time concurrently per user per login. That is, once logged into the portal, they cannot go to another system and log in with the same credentials again. This option is disabled by default.
Tunnel Mode	These settings determine how tunnel mode clients are assigned IPv4 addresses.
Enable Split Tunneling	Select so that the VPN carries only the traffic for the networks behind the FortiGate unit. The user’s other traffic follows its normal route. If you enable split tunneling, you are required to set t