Skip to main content
CC_Mike
CC_Mike
New Member
November 1, 2022
Solved

Running a web server and VPN, both on the same port (443)

  • November 1, 2022
  • 1 reply
  • 5704 views

We have one static/fixed IP. We want to run both VPN and a local web server, both on port 443.

Is FortiGate # able to determine which protocol is connecting on port 443 and then redirect according
(It looks like I can run VPN on port 443 and also access the configuration page via 443).

If so, how would I configure this?

Thanks in advance
Michael

Best answer by pminarik

Hi Michael,

This isn't possible. You will only be able to use either SSL-VPN, or whatever else, on TCP/443. Even with the admin GUI (there's a CLI option that lets you choose which service takes precedence when both are enabled on the same interface+port).

1 reply

pminarik
Staff
pminarikAnswer
Staff
November 1, 2022

Hi Michael,

This isn't possible. You will only be able to use either SSL-VPN, or whatever else, on TCP/443. Even with the admin GUI (there's a CLI option that lets you choose which service takes precedence when both are enabled on the same interface+port).

CC_Mike
CC_MikeAuthor
New Member
November 1, 2022

Hi @pminarik 

Thanks for your replay. Then I don't understand why I can access VPN and the admin interface from "outside" at the same time through the same port. FortiClient is configured to use myIP:443. And the admin interface is accessible via https://myIP:443. Can you explain why?

Thanks a lot

pminarik
Staff
pminarik
Staff
November 1, 2022

We would need to see the configuration and some debugs, because what you're describing is not expected.

 

Here's the warning you will receive in CLI if you set the SSL-VPN port to be the same as the admin GUI port:

fgt (settings) # set port 443
Warning: SSL-VPN is using the same port number as administrative HTTPS GUI access.
If both are set to 443 and you have enabled port-precedence in the SSL-VPN settings, you may have issues connecting to the administrative HTTPS GUI access. To resolve this, you may change the administrative HTTPS GUI port or the SSL-VPN port.

 

Terms & ConditionsAccessibility statement