Fortinet FORTIOS V3.0 MR7

Configuring a FortiGate SSL VPN Configuring the SSL VPN client

FortiOS v3.0 MR7 SSL VPN User Guide

01-30007-0348-20080718 27

To download the SSL VPN standalone tunnel client (Linux)

1Go to the Fortinet Technologies home page at http://support.fortinet.com/ and

select Support.

2Under Support, enter your user name and password.

This takes you to the Fortinet customer support site.

3Select Firmware Images and then FortiGate.

The FortiGate index page opens.

4Select v3.0 and then MR7.

Contents

Main Page Contents Configuring a FortiGate SSL VPN .................................................. 13 Working with the web portal........................................................... 65 Page Page Introduction About FortiGate SSL VPN About this document Document conventions ! Typographic conventions FortiGate documentation Related documentation FortiManager documentation FortiClient documentation FortiMail documentation FortiAnalyzer documentation Fortinet Tools and Documentation CD Fortinet Knowledge Center Customer service and technical support Configuring a FortiGate SSL VPN Comparison of SSL and IPSec VPN technology Legacy versus web-enabled applications Authentication differences Connectivity considerations Relative ease of use Client software requirements SSL VPN modes of operation Web-only mode Web-only mode client requirements Tunnel mode Tunnel-mode client requirements Topology Infrastructure requirements Configuration overview Configuring the SSL VPN client SSL VPN Virtual Desktop application. Using the SSL VPN Virtual Desktop Page Page Using the SSL VPN standalone tunnel clients Page Page Page Page Page Page Page Page Page Page Configuring SSL VPN settings Enabling SSL VPN connections and editing SSL VPN settings Page Specifying a port number for web portal connections Specifying an IP address range for tunnel-mode clients ! Enabling strong authentication through security certificates Specifying the cipher suite for SSL negotiations Setting the idle timeout setting Setting the client authentication timeout setting Adding a custom caption to the web portal home page Adding WINS and DNS services for clients Redirecting a user group to a popup window Customizing the web portal login page Configuring user accounts and SSL VPN user groups Page Page Page Configuring firewall policies Configuring firewall addresses Configuring Web-only firewall policies Page Configuring tunnel-mode firewall policies Page Configuring SSL VPN event-logging Monitoring active SSL VPN sessions Configuring SSL VPN bookmarks and bookmark groups Viewing the SSL VPN bookmark list Configuring SSL VPN bookmarks Viewing the SSL VPN Bookmark Groups list Configuring SSL VPN bookmark groups Assigning SSL VPN bookmark groups to SSL VPN users SSL VPN host OS patch check Configuration Example Granting unique access permissions for SSL VPN tunnel user groups Sample configuration for unique access permissions with tunnel mode user groups Page Page Page SSL VPN virtual interface (ssl.root) To allow ssl users to browse the Internet through the FortiGate unit: To allow SSL-tunnel users to access a policy-based VPN peer network: SSL VPN dropping connections Page Page Working with the web portal Connecting to the FortiGate unit Web portal home page features Page Launching web portal applications URL re-writing Adding a bookmark to the My Bookmarks list Page Page Page Page Page Page To add a RDP connection and start a RDP session 5Select OK. Page Page Page Starting a session from the Tools area Tunnel-mode features Working with the ActiveX/Java Platform plug-in Page Uninstalling the ActiveX/Java Platform plugin Logging out Page Index A B C D K L M N O V W X