Fortigate failing PENTEST and CyberSecurity Insurance Requirements

I have numerous clients that have rolled out the SSL portals/SSL VPNS and they are failing pentest's, compliance testing, cyber security insurance requirements.  
While I understand Fortigate published this article.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Penetration-test-on-FortiGate-with-SSL-VPN-port/ta-p/249574

The fact remains the devices are failing, verification. We are having to switch over to IPSEC.  The developers need to take this matter more seriously.