Creating priority-based SSL VPN connections

SSL VPN only supports priority-based configurations for resiliency/redundancy. To use SSL VPN resiliency/redundancy, configure a list of VPN gateways within the <server> tag, separating entries with semicolons:

<forticlient_configuration>

<vpn>

<sslvpn>

<options>

<enabled>1</enabled>

...

</options>

<connections>

<connection>

<name>ssl_90_1</name>

<server>10.10.90.1;ssldemo.fortinet.com;172.17.61.143:443</server>

...

</connection>

</connections>

</sslvpn>

</vpn>

</forticlient_configuration>

This is a balanced but incomplete XML configuration fragment. The fragment includes all closing tags, but omits some important elements to complete the VPN configuration. For a list of all available elements, see the FortiClient XML Reference Guide.

For SSL VPN, all FortiGates must use the same TCP port.