SSL VPN to dial-up VPN migration
FortiOS 7.6.0 and later does not support the SSL VPN web and tunnel mode feature on some FortiGate models:
|
FortiGate models |
Supports SSL VPN? |
FortiOS upgrade impact on SSL VPN configuration |
|---|---|---|
|
FortiGate models with 2GB of RAM or less |
No | Deleted during upgrade to FortiOS 7.6.0 or later |
|
FortiGate models with more than 2GB of RAM |
Yes | Retained after upgrade to FortiOS 7.6.0 or later |
See the FortiOS 7.6 Release Notes for information about affected models.
You may want to use IPsec VPN instead of SSL VPN. Depending on your needs and FortiGate model, you may want to migrate the VPN configuration before or after upgrade to FortiOS 7.6.0:
-
For information about migrating before upgrade to FortiOS 7.6.0, see the FortiOS 7.4 SSL VPN to IPsec VPN Migration guide.
-
For information about migrating after upgrade to FortiOS 7.6.0, see the FortiOS 7.6 SSL VPN to IPsec VPN Migration guide.
The migration guide covers:
-
Background information, such as a security comparison between SSL VPN and IPsec VPN, the differences between IKEv1 and IKEv2, and information about TLS protocol for tunneling.
-
Design differences between SSL VPN and IPsec VPN to consider, such as authentication methods, user groups, full tunneling versus split tunneling, client address assignments, policy configurations, FortiClient or endpoint configurations, and whether to migrate VPNs before or after FortiOS upgrade.
-
Instructions for configuring IPsec tunnels using the FortiOS IPsec wizard.
-
Instructions for migrating FortiClient endpoint configurations.