SMBv2 Support (SSL VPN)

On all FortiGate models, SMBv2 is enabled by default for SSL VPN.

Client PCs can access the SMBv2 server using SSL VPN web-only mode.

This version adds two new commands under config vpn ssl web portal.

Sample configuration

You must use the CLI to use this feature.

To configure SMBv2:

1. Run config vpn ssl web portal:

   config vpn ssl web portal
       edit portal-name
          set smb-min-version smbv2
          set smb-max-version smbv3
       end

2. After running config vpn ssl web portal, configure SSL VPN and firewall policies as usual.
3. Then connect to the SSL VPN web portal and create an SMB bookmark for the SMBv2 server.
4. Click the bookmark to connect to the SMBv2 server.
5. In the FortiGate, use package capture to verify that SMBv2 works: