Fortinet: How to Setup SSL/VPN to Remotely Connect to a FortiGate firewall

foreign hey this is Matt from firewalls.com in this photo get tutorial video I'll be showing you how to set up SSL VPN to connect to the Fort gate from outside of the network using the 40 client let's jump into the firewall and get started the first thing that we need to do is configure our VPN settings so under VPN and SSL VPN settings here we can set the listening interface which will be the outside internet connection if you have more than one blend you can select both here the listen on Port will be the port used for VPN connections to establish the port that you specify here will be able to be logged into when using web mode access by going to the public IP for this example we're going to allow access from any outside host if you know the public IP of people that will be connecting in you can limit access here we're going to use a predefined address range that's already pre-configured on the 40 gate firewall we're not going to change our DNS settings but if you have your own internal DNS server I would recommend specifying those here Now by default we'll have all users set to where they can only log into the web access portal via the public IP however we want to create our own portal for our remote users group where we can allow a tunnel access using the 40 client click apply to save changes now you'll be prompted to set up an SSL VPN policy as one currently does not exist we're going to name this our SSL VPN to internal Lan access the incoming interface will be the SSL VPN tunnel that has just been created that is binded to the WAN interface the outgoing interface will be the network on the internal that you want the users to access in this case it will be our internal Source we will specify as any however we need to select our remote users group in order to identify users coming in on the inbound connection and our destination we are going to use our internal Network object which is our internal subnet the service we will set to any and we do not need a nap on in this kind of firewall rule we're going to log all sessions and click ok now any user that is set up on the firewall that's in the remote users group should now be able to log in and access the web poll once logged in you'll be prompted to download the photo client in order to access the VPN if it isn't already installed on the machine you can download it here for your required operating system now if you if you already have the 40 client installed you can launch it here you can also download the 40 client from the 40client.com website once downloaded we are going to run the 40 client installation we're going to run through the installation Setup Wizard now that the 40 client VPN has been installed we need to configure our VPN connection click here to configure VPN now this client is the VPN only installation if you want the full for a client package you can download that from the 40 client website and ensure you select the full download which includes the antivirus protection connection name will be test VPN our remote Gateway will be the public IP of the firewall we're going to customize the port as we're using a custom port in order to alleviate the conflict with the WAN Management Port I'm going to click save I'm going to log in with my user account I'm going to click connect we've successfully connected to the VPN I do recommend testing the VPN access from a hotspot connection to where you are testing as if you're outside of the firewall in order to be successful thanks for watching this video for all things firewall related visit us at firewalls.com

Channel: Firewalls.com

Views: 376,344

Keywords: fortinet, fortigate, fortinet firewall, fortigate firewall, fortinet vpn, fortinet congifuration, firewall configuration, fortigate support, fortinet vpn client, fortigate vpn

Id: pa3GPiAGCww

Length: 5min 42sec (342 seconds)

Published: Wed Mar 18 2020