When the remote client initiates a connection, the FortiGate unit prompts the client for its client-side certificate as part of the authentication process.

Select to use group certificates for authenticating remote clients. Alternately, select a certificate template that is configured to use the FortiManager CA.

Select the signed server certificate to use for authentication. The interface does not time out when web application sessions or tunnels are up. This setting applies to the SSL VPN session. When enabled, enter the amount of time that the connection can remain inactive before timing out, from 10 to 28800 seconds (default: 300) in the Inactive For field.

If limiting access, select the hosts that have access in the Hosts field. This is generally your external interface.Īllow access from any hosts, or limit access to specific hosts. Configure the following settings, then click OK to create the VPN.ĭefine the interface the FortiGate will use to listen for SSL VPN tunnel requests.The Create SSL VPN dialog box or pane is displayed. Click Add SSL VPN, or click Create New in the content toolbar.To create SSL VPNs, you must be logged in as an administrator with sufficient privileges.

Forti ssl vpn