Skip to main content
jintrah_FTNT
Staff
Staff
May 12, 2020

Technical Tip: Broken web sites when accessed using SSLVPN in web mode

  • May 12, 2020
  • 0 replies
  • 2354 views
Description
After an upgrade to (the newer releases) firmware 6.x, access to some websites over SSL VPN web mode are broken partly or completely.

This article describes how to disable the option.

Solution
6.x firmware introduced new CLI for SSL VPN settings to add x-content-type-options headers(enabled) by default.
While it may help prevent MIME-sniffing, it also breaks some (older/legacy) web applications.
To disable the option, use the below command.
# config vpn ssl settings
    set x-content-type-options disable
end

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!