Fortinet white logo
Fortinet white logo

Step 5: Configure SSL-VPN Tunnel Settings

Step 5: Configure SSL-VPN Tunnel Settings

To configure the SSL-VPN tunnel settings:
  1. Select VPN > SSL-VPN Settings to configure the SSL-VPN settings.
  2. Set the "Listen on Interface" to your Internet-facing interface, which is Port1 in this example.
  3. To avoid port conflict, set the Listen on Port to 44310.
  4. Set "Restrict Access" to Allow access from any host.
  5. For "Server Certificate", select a desired certificate. (Note: Fortinet_Factory is the default certificate. We recommend that you purchase and use a certificate of your own.)
  6. Under "Tunnel Mode Client Settings", set the IP range to the one you've selected earlier, i.e., SSLVPN_TUNNEL_ADDR1.
  7. Under Authentication/Portal Mapping, select Create New to create a new rule:
    1. Set Users/Groups to sslvpngrp
    2. Set Portal to full-access
    3. Click OK.

    If necessary, map up the SSL-VPN portal for All Other Users/Groups and save your changes.

  8. Click Apply.

Step 5: Configure SSL-VPN Tunnel Settings

Step 5: Configure SSL-VPN Tunnel Settings

To configure the SSL-VPN tunnel settings:
  1. Select VPN > SSL-VPN Settings to configure the SSL-VPN settings.
  2. Set the "Listen on Interface" to your Internet-facing interface, which is Port1 in this example.
  3. To avoid port conflict, set the Listen on Port to 44310.
  4. Set "Restrict Access" to Allow access from any host.
  5. For "Server Certificate", select a desired certificate. (Note: Fortinet_Factory is the default certificate. We recommend that you purchase and use a certificate of your own.)
  6. Under "Tunnel Mode Client Settings", set the IP range to the one you've selected earlier, i.e., SSLVPN_TUNNEL_ADDR1.
  7. Under Authentication/Portal Mapping, select Create New to create a new rule:
    1. Set Users/Groups to sslvpngrp
    2. Set Portal to full-access
    3. Click OK.

    If necessary, map up the SSL-VPN portal for All Other Users/Groups and save your changes.

  8. Click Apply.