Technical Tip: Changes on SSL VPN modes starting from v7.6.3

From v7.6.3, SSL VPN tunnel mode has been removed, leaving only web mode (which will be referred to as Agentless VPN) on some models:

Agentless VPN is disabled by default, and to enable it, run the following command:

config system global

    set sslvpn-web-mode enable

end

Once Agentless VPN is enabled from the CLI, to view it on the GUI, run the following command:

config system settings

    set gui-sslvpn enable

end

Once the above changes are done, in the VPN section, it will show Agentless VPN Portals and Agentless VPN Settings.

To avoid any issues, migrate the SSL VPN to the IPsec VPN. Follow the instructions in IPsec and SSL VPN or Agentless VPN.

Note:

• FortiGate models with 2GB of RAM or less do not support tunnel mode or web mode; instead, dial-up IPsec VPN would need to be used, as explained in SSL VPN to dial-up VPN migration.
• Also, a few affected models are listed here: Agentless VPN (formerly SSL VPN web mode) not supported on FortiGate 40F, 60F, and 90G series models. 
• For 50G, 70G, and 90G models, the SSL VPN has been removed in v7.2.12 & v7.4.8 onwards: SSL VPN not supported on FortiGate G-Series Entry-Level models.
• There are limited browsers that support Agentless VPN. For a list of supported browsers,  consult the FortiOS Release Notes for the applicable version, for example: SSL VPN support.

Related documents:

Agentless VPN v7.6.3

Migration from SSL VPN tunnel mode to IPsec VPN v7.6.3

SSL VPN to IPsec VPN Migration