Skip to main content
ITDepart
ITDepart
Explorer II
December 14, 2024
Question

Fortigate 90G + SSLVPN + new firmwares (7.4.6 or 7.6.1)

  • December 14, 2024
  • 8 replies
  • 15130 views

Hi, can anyon clarify what is happening with Fortigate 90G and new firmware versions 7.4.6 or 7.6.1?
I have the Fortigate 90G + 7.4.5 + SSLPVN service in production without problems, but:

Fortigate 90G has 8GB of RAM... what happend with SSLVPN if I will upgrade from 7.4.5 to 7.4.6?

Thanks!

8 replies

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
December 14, 2024

I heard SSL VPN would be unsupported sooner or later for all "desktop" models (90x and below) regardless of their memory size. I don't know the reason behind it though.

Toshi

dingjerry_FTNT
Staff
dingjerry_FTNT
Staff
December 14, 2024

Hi @ITDepart ,

 

I have checked all resources I could access and confirmed that, yes, SSL VPN will not be supported for FGT 90G.

 

And, yes, all desktop form factor FGT models, except for FGT 120G, will NOT have SSL VPN anymore in 7.4.6 and 7.6.1 and later.

    dingjerry_FTNT
    Staff
    dingjerry_FTNT
    Staff
    December 14, 2024

    Hi @ITDepart ,

     

    That means, if you upgrade to 7.4.6, all SSL VPN configurations will be removed.

     

    It may or may not have a warning message while you are upgrading because I do not have a FGT 90G for testing.

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    December 14, 2024

    @dingjerry_FTNTDo you know the reason behind it?

    Toshi

    ITDepart
    ITDepartAuthor
    Explorer II
    December 14, 2024

    But why? I have it working right now (FG 90G + 7.4.5 + SSLVPN) without any problems!!

    And why only to FG 90G? It doesn't make sense!!!

    ITDepart
    ITDepartAuthor
    Explorer II
    December 14, 2024

    I think this is a very bad decision from Fortinet Team.... I bought this firewall 2 weeks ago to use with SSLVPN service.... :(

     

    dingjerry_FTNT
    Staff
    dingjerry_FTNT
    Staff
    December 14, 2024

    Hi all,

     

    I can see that there are many conversations in multiple mantises about this topic (the removal of SSL VPN web mode and tunnel mode).

     

    So I think all documents related to this topic are subject to change for the information. I will keep an eye on it and may update this post if possible.

      solae
      solae
      Visitor III
      December 24, 2024

      Is there anything new (official) to this topic?

      Is SSL-VPN Supported on 7.4.6 for 70F? What about 60F?

      Hysterical-Networks
      Hysterical-Networks
      New Member
      January 19, 2025

      @solae - SSL-VPN is supported on FortiOS 7.4.6 for 70F and 60F, however it takes additional steps to enable after 7.4.4. Note that the feature does not appear as option in Feature Visibility GUI--you have to enable it by CLI. Appears Fortinet fixed that requirement in 7.6 (see my other reply below where it does appear in Feature Visibility GUI out of the box--just disabled by default).

      Changes in default values | FortiGate / FortiOS 7.4.4 | Fortinet Document Library

       

      I just factory imaged a 70F with 7.4.6 and took these screenshots for you:

      Screenshot 2025-01-19 082127.pngScreenshot 2025-01-19 082204.png

      Thanks,

      Michael C (FCP)

      Hysterical-Networks
      Hysterical-Networks
      New Member
      January 19, 2025

      Hi All,

       

      I think there may be a lot of misunderstanding around the changes in FortiOS in versions 7.4.4 (and above) and 7.6.0 (and above) that impact proxy-related features and SSL-VPN.

       

       

      Please refer to this Fortinet support article that describes the changes that impact desktop firewall models with 2GB of RAM. 

      Special Notice for low end units (<2Gb... - Fortinet Community

      To emphasize this point, I have pasted a photo of a FortiGate 70F (which has 4GB of RAM) running FortiOS 7.6.1. Note that SSL-VPN does not appear in the default VPN menu at the time of a fresh install, however the feature is there and just needs to be made visible under System->Feature Visibility.

       

      Enjoy,

      Michael C (FCP)

       

      Screenshot 2025-01-18 162923.png

       

      Screenshot 2025-01-18 165517.png

      ITDepart
      ITDepartAuthor
      Explorer II
      June 5, 2025

      @Hysterical-Networks , we are talking about why a Fortigate 90G with 8Gb ram disables the SSLVPN tunnel mode.... it's crazy, for this model finally they re-activate... 

      BUT FORTINET YOU ARE REALLY WEIRD!!!


      Today we update our Fortigate 90G witn 8GB ram from 7.4.7 (with sslvpn tunnel mode active) to 7.4.8 and the SSLVPN dissapear!!!!


      THIS IS REALLY WEIRD!!!

      We contact to support a give me this answer:
      ---> https://docs.fortinet.com/document/fortigate/7.4.8/fortios-release-notes/743723/new-features-or-enhancements <----
      --> Resolved issued -> bug id 1026775 Remove SSL VPN from FG9xG.
      WTF!!!       Fortinet delete SSLVPN a publish in a resolved issue??????????

      Rino_B
      Rino_B
      Explorer III
      June 7, 2025

      Please check SSL VPN support on FortiGate models: https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-support-on-FortiGate-models/ta-p/359125

      Terms & ConditionsAccessibility statement