Network Router User Manual
Table Of Contents
- Contents
- Introduction
- Configuring a FortiGate SSL VPN
- Comparison of SSL and IPSec VPN technology
- SSL VPN modes of operation
- Topology
- Configuration overview
- Configuring the SSL VPN client
- Configuring SSL VPN settings
- Enabling SSL VPN connections and editing SSL VPN settings
- Specifying a port number for web portal connections
- Specifying an IP address range for tunnel-mode clients
- Enabling strong authentication through security certificates
- Specifying the cipher suite for SSL negotiations
- Setting the idle timeout setting
- Setting the client authentication timeout setting
- Adding a custom caption to the web portal home page
- Adding WINS and DNS services for clients
- Redirecting a user group to a popup window
- Customizing the web portal login page
- Configuring user accounts and SSL VPN user groups
- Configuring firewall policies
- Configuring SSL VPN event-logging
- Monitoring active SSL VPN sessions
- Configuring SSL VPN bookmarks and bookmark groups
- SSL VPN host OS patch check
- Granting unique access permissions for SSL VPN tunnel user groups
- SSL VPN virtual interface (ssl.root)
- SSL VPN dropping connections
- Working with the web portal
- Index
Configuring a FortiGate SSL VPN Configuring firewall policies
FortiOS v3.0 MR7 SSL VPN User Guide
01-30007-0348-20080718 43
Require Virtual Desktop Connection prevents a user from establishing a SSL VPN
session without using the SSL VPN Virtual Desktop application. For more
information, see the SSL VPN User Guide.
11 To enable the FortiGate unit to remove residual information from the remote client
computer (for example, from the web browser cache) just before the SSL VPN
session ends, select Enable Cache Clean. When this feature is enabled, if the
client’s browser cannot install and run the cache cleaner, the user is not allowed to
access the SSL-VPN portal.
12 To allow the SSL VPN user group to use a pre-configured bookmark group,
enable Bookmarks and select the bookmark group from the drop-down list.
13 To have the FortiGate unit display a second HTML page in a popup window when
the web portal home page is displayed, type the URL of the web page into the
Redirect URL field.
14 To display a custom web portal home page caption for this group, enter the
message in the Customize portal message for this group field.
Note: This custom message overrides the portal message configured in
VPN >
SSL > Config.
15 Select OK.
Configuring firewall policies
This section contains the procedures needed to configure firewall policies for web-
only mode operation and tunnel-mode operation. These procedures assume that
you have already completed the procedures outlined in “Configuring user
accounts and SSL VPN user groups” on page 42.
A firewall policy specifies the originating (source) IP address of a packet and the
destination address defines the IP address of the intended recipient or network.
In general, configuring a firewall policy involves:
• specifying the IP source and destination addresses
Table 1: AV/Firewall supported product detection
Product AV Firewall
Norton Internet Security 2006 YY
Trend Micro PC-cillin YY
McAfee YY
Sophos Anti-Virus YN
Panda Platinum 2006 Internet Security YY
F-Secure YY
Secure Resolutions YY
Cat Computer Services YY
AhnLab YY
Kaspersky YY
ZoneAlarm YY