Skip to main content
ricardo_magno
New Member
May 28, 2018
Question

Connecting forticlient to IOS device

  • May 28, 2018
  • 1 reply
  • 4656 views

Hi, I would like to ask on how to connect my IOS device to forticlient vpn (Still novice on this firewall). I tried several times but its not going thru how should I proceed? Thank you for the response. Can you explain step by step. much appreciated

    1 reply

    craigomez
    New Member
    June 6, 2018

    hello, ricardo

    follow these steps ,have a good day!

    Go to User & Device > User > User Definition. Add as many local users as required with the User Creation Wizard. Go to User & Device > User > User Groups. Create a user group for FortiClient users and add the new user(s) to the group. 2. Creating an SSL VPN portal Go to VPN > SSL > Portals. Edit the web-access portal. This portal supports web mode by default.*

    Enable Split Tunneling is not enabled so that all SSL VPN traffic will go through the FortiGate unit. 3. Configuring the SSL VPN tunnel Go to VPN > SSL > Settings and set Listen on Interface(s) to wan1. Set Listen on Port to 10443 and Specify custom IP ranges. Use the default IP Range, SSLVPN_TUNNEL_ADDR1. At the bottom of the page, under Authentication/Portal Mapping, add the FortiClient user group and map it to the web-access portal. If necessary, map a portal for All Other Users/Groups. 4. Adding security policies for access to the Internet and internal network Go to Policy & Objects > Policy > IPv4. Create a security policy allowing SSL VPN user to access the internal network. Set Incoming Interface to ssl.root. Set Source Address to all and Source User to the new user group. Set Outgoing Interface to the local network interface so that the remote user can access the internal network. Set Destination Address to all, enable NAT, and configure any remaining firewall and security options as desired. Add a second security policy allowing SSL VPN users to access the Internet. For this policy, Incoming Interface is set to ssl.root and Outgoing Interface is set to wan1. 5. Configuring FortiClient for SSL VPN in iOS Install FortiClient on the iOS device. Add a new VPN Gateway. Set Host Name to the FortiGate’s IP (in the example, 172.20.120.236), set Host Port to 10443, and set User Name to match the new user account. 6. Results Select the VPN in FortiClient. Enter the Password and select Login. You will be able to connect to the VPN. On the FortiGate, go to VPN > Monitor > SSL-VPN Monitor to see that the user has connected.

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT