[PDF] fortigate v6 ssl vpn

How does the FortiGate SSL VPN work?

The FortiGate continues with the remaining SSL-VPN host-check and other steps until it receives the authentication cookie. It then allow the SSL VPN user to connect using tunnel mode.

How do I add users to FortiGate?

In the applications list, select FortiGate SSL VPN. On the app's overview page, in the Manage section, select Users and groups. Select Add user, then select Users and groups in the Add Assignment dialog. In the Users and groups dialog box, select B.Simon in the Users list, and then click the Select button at the bottom of the screen.

How do I sign a certificate in FortiGate?

The certificate must be signed by a CA that is known by the FortiGate, either through the default CA certificates or through importing a CA certificate. The user can either match a static subject or common name defined in the PKI user settings, or match an LDAP user in the LDAP server defined in the PKI user settings.

How does FortiGate authenticate PKI users?

When using PKI users, the FortiGate authenticates the user based on there identity in the subject or the common name on the certificate. The certificate must be signed by a CA that is known by the FortiGate, either through the default CA certificates or through importing a CA certificate.