Skip to main content
shlomim
New Member
July 10, 2025
Solved

Remote Access VPN to provide access to S2S VPN - 40F 7.2

  • July 10, 2025
  • 1 reply
  • 412 views

Hi There,

I have 40F running 7.2

I have Site2Site IPSEC VPN Running.

I have added to to Phase 2 the Subnet that is used for the Remote Access SSL-VPN users (172.16.255.0/24).

over the split tunnel - I've added the subnets that are in the remote S2S Firewall (because these are the relevant subnets).

I've added a rule over the firewall - do I need to set anything else ?

here is the configuration I've used:

config firewall policy
edit 26
set name "POD1"
set srcintf "ssl.root"
set dstintf "S2SVPN"
set action accept
set srcaddr "SSL VPN"
set dstaddr "POD1"
set schedule "always"
set service "ALL"
set users "pod1"
next
end

 

config vpn ssl settings
set servercert "SSL-VPN"
set tunnel-ip-pools "SSL VPN"
set source-interface "wan"
set source-address "all"
set source-address6 "all"
set default-portal "SSL_VPN"
config authentication-rule
edit 1
set groups "VPN_USERS"
set portal "SSL_VPN"
next
end
end

 

config vpn ssl web portal
edit "SSL_VPN"
set tunnel-mode enable
set web-mode enable
set limit-user-logins enable
set save-password enable
set ip-pools "SSL VPN"
set split-tunneling-routing-address "KRURLEE"
config bookmark-group
edit "gui-bookmarks"
next
end
set theme jade
next
end

Best answer by sjoshi

Hi shlomim,

Can you share your topology.
is is user>>sslvpn>>fgt>>ipsec tnl>> remote sites ?

In the firewall policy make sure to add the user grp VPN_USERS
Is there any specific issue you are facing?

1 reply

sjoshi
Staff
sjoshiAnswer
Staff
July 10, 2025

Hi shlomim,

Can you share your topology.
is is user>>sslvpn>>fgt>>ipsec tnl>> remote sites ?

In the firewall policy make sure to add the user grp VPN_USERS
Is there any specific issue you are facing?

Thanks, Salon
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!