Skip to main content
kent2612
kent2612
New Member
April 23, 2019
Question

Limit access for specific hosts when SSL VPN accessing a SSL VPN Portal

  • April 23, 2019
  • 1 reply
  • 4303 views

How do I allow access only for specific hosts or subnet on a LAN to a particular SSL VPN Portal? I notice the settings under SSL-VPN Settings 'Limit access to specific hosts'. I think changes here will affect all Portals?

 

Thanks in advanced.

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    April 23, 2019

    I haven't tested to make sure my theory but I think what routes are injected into a client device's routing table for split-tunneling is decided by "set split-tunneling-routing-t address ADDR_OR_ADDRGRP_OBJECT" (at least with 5.6.x) under a portal config.

    Then in addition, you can further limit it by the destination address of the ssl.root->internal_interface policy. Regularly we match both to be the same.

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.