SSL-VPN Sysadmin Access (Fortigate 100F)

Forum|Forum|1 year ago
November 22, 2024
2 replies
749 views

Dear Forum Community ,

I want to access remote in my working company and have acess in all vlans . The infastructure of my fortigate is the bellow :

Interface WAN: For Access in ISP

Interface Trunk with subinterface: Vlan1,Vlan2, Vlan3 etc

I do all the settings with ssl-vpn address and i want to have one firewall policy to access and administrate all VLANs.

AEK

SuperUser

Hello

Add a firewall rule like this:

Src intf: SSL-VPN Tunnel Interface
Src: SSL_VPN_address_range + SSL_VPN_user_or_group
Dst intf: VLAN1, VLAN2, VLAN3
Dst: all

AEK

funkylicious

SuperUser

Hi,
Exactly how @AEK described it, just keep in mind that you would need to activate this feature in order to have multiple interfaces in one policy which is not enabled by default.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-allow-the-configuration-of-policies-with/ta-p/191941

"jack of all trades, master of none"

Sign up

Login with SSO

Login to the community

Login with SSO