SSL vpn and realms

Forum|Forum|8 months ago
December 19, 2025
6 replies
734 views

Can a realm be set up with a virtual host name (so that the certificate I use for VPN will match the URL set in FortiClient) for SSL VPN? I found the virtual host under Config vpn ssl web realm. Is this only for web based VPN connections?

SSL-VPN

funkylicious

SuperUser

hi,

according to this document, which is quite old https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/724772/ssl-vpn-multi-realm , it should also work for SSLVPN with FortiClient, https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/724772/ssl-vpn-multi-realm#:~:text=To%20see%20the%20results%20for%20QA%20user%3A

"jack of all trades, master of none"

LanwtAuthor

Explorer

Okay, I have not had a chance to test but I used the CLI to create a realm with a virtual host, but the realm still shows the IP version for FortiClient. I know the "gateway" in FortiClient needs the port as part of the URL. The realm is set as URL Path as "test" and it says "SSL-VPN Realm can be accessed at: https://x.x.x.x:123/test" (where x.x.x.x is the IP and 123 is the port). Virtual host is test.mydomain.com. Do I set FortiClient gateway to test.mydomain.com:port?

funkylicious

SuperUser

i havent done the setup with virtual-host but try setting the FQDN and the custom port in the Customize Port. if it doesnt work try adding it to the FQDN:port

"jack of all trades, master of none"

Sign up

Login with SSO

Login to the community

Login with SSO