SMBv2 support

On all FortiGate models, SMBv2 is enabled by default for Agentless VPN.

To configure SMBv2:

1. Set the minimum and maximum SMB versions.

   config vpn ssl web portal
       edit portal-name
          set smb-min-version smbv2
          set smb-max-version smbv3
       next
   end

2. Configure the Agentless VPN settings. See Agentless VPN for remote users.

3. Configure the firewall policy. See Firewall policy.

4. Connect to the Agentless VPN web portal, and create an SMB bookmark for the SMBv2 server.

5. Click the bookmark to connect to the SMBv2 server.

6. On the FortiGate, use package capture to verify that SMBv2 works: