Technical Note: SSL VPN Tunnel mode widget in FortiOS 5.4
Description
Solution
The SSL VPN tunnel mode widget is no longer available in the web portal.
The tunnel mode widget used a deprecated NPAPI plugin mechanism to send the tunnel client to the browser for local system execution - this is a popular exploitation vector.
The tunnel mode widget used a deprecated NPAPI plugin mechanism to send the tunnel client to the browser for local system execution - this is a popular exploitation vector.
Solution
FortiClient is now required for tunnel mode SSL VPN.
FortiOS 5.4
FortiOS 5.2
FortiOS 5.4
FortiOS 5.2