Fortinet FORTIOS V3.0 MR7

FortiOS v3.0 MR7 SSL VPN User Guide

22 01-30007-0348-20080718

Configuring the SSL VPN client Configuring a FortiGate SSL VPN

6To download the SSL VPN Virtual Desktop, select

SSLVPNVirtualDesktopSetup_3.0.384.exe and follow the InstallShield

Wizard instructions.

Figure 2: FortiClient SSL VPN InstallShield Wizard welcome screen

7To run the SSL VPN Virtual Desktop application, select Start > All Programs >

FortiNet > SSL VPN Virtual Desktop > SSL VPN Virtual Desktop.

The FortiGate unit may offer you a self-signed security certificate. If you are

prompted to proceed, select Yes.

8When you are prompted for your user name and password:

• In the Name field, type your user name.

• In the Password field, type your password.

9Select Login.

Contents

Main Page Contents Configuring a FortiGate SSL VPN .................................................. 13 Working with the web portal........................................................... 65 Page Page Introduction About FortiGate SSL VPN About this document Document conventions ! Typographic conventions FortiGate documentation Related documentation FortiManager documentation FortiClient documentation FortiMail documentation FortiAnalyzer documentation Fortinet Tools and Documentation CD Fortinet Knowledge Center Customer service and technical support Configuring a FortiGate SSL VPN Comparison of SSL and IPSec VPN technology Legacy versus web-enabled applications Authentication differences Connectivity considerations Relative ease of use Client software requirements SSL VPN modes of operation Web-only mode Web-only mode client requirements Tunnel mode Tunnel-mode client requirements Topology Infrastructure requirements Configuration overview Configuring the SSL VPN client SSL VPN Virtual Desktop application. Using the SSL VPN Virtual Desktop Page Page Using the SSL VPN standalone tunnel clients Page Page Page Page Page Page Page Page Page Page Configuring SSL VPN settings Enabling SSL VPN connections and editing SSL VPN settings Page Specifying a port number for web portal connections Specifying an IP address range for tunnel-mode clients ! Enabling strong authentication through security certificates Specifying the cipher suite for SSL negotiations Setting the idle timeout setting Setting the client authentication timeout setting Adding a custom caption to the web portal home page Adding WINS and DNS services for clients Redirecting a user group to a popup window Customizing the web portal login page Configuring user accounts and SSL VPN user groups Page Page Page Configuring firewall policies Configuring firewall addresses Configuring Web-only firewall policies Page Configuring tunnel-mode firewall policies Page Configuring SSL VPN event-logging Monitoring active SSL VPN sessions Configuring SSL VPN bookmarks and bookmark groups Viewing the SSL VPN bookmark list Configuring SSL VPN bookmarks Viewing the SSL VPN Bookmark Groups list Configuring SSL VPN bookmark groups Assigning SSL VPN bookmark groups to SSL VPN users SSL VPN host OS patch check Configuration Example Granting unique access permissions for SSL VPN tunnel user groups Sample configuration for unique access permissions with tunnel mode user groups Page Page Page SSL VPN virtual interface (ssl.root) To allow ssl users to browse the Internet through the FortiGate unit: To allow SSL-tunnel users to access a policy-based VPN peer network: SSL VPN dropping connections Page Page Working with the web portal Connecting to the FortiGate unit Web portal home page features Page Launching web portal applications URL re-writing Adding a bookmark to the My Bookmarks list Page Page Page Page Page Page To add a RDP connection and start a RDP session 5Select OK. Page Page Page Starting a session from the Tools area Tunnel-mode features Working with the ActiveX/Java Platform plug-in Page Uninstalling the ActiveX/Java Platform plugin Logging out Page Index A B C D K L M N O V W X