Skip to main content
chrbar
New Member
July 2, 2015
Question

SSL VPN tunnel under Apple IOS?

  • July 2, 2015
  • 6 replies
  • 27232 views

Hello, We use two FortiGate 3700D (HA cluster) running FortiOS 5.2.3,build0670, managed from FortiManager 5.2.2-build0706 150415. We're testing the SSL VPN features and FortiClient. Everything runs correctly under Windows, Mac OSX, Linux and Android. We meet some difficulties under Apple IOS (iPad and iPhone). Currently we use NetExtender from SonicWALL (Dell), which runs as VPN Client under all OS. But the App FortiClient under Apple IOS doesn't run as VPN Client, we can etablish a VPN connexion inside the App but not under the IOS to be able to use other App (as RDP) with the VPN tunnel. Could you tell me if it's possible to etablish a VPN connexion from Apple IOS device to a Fortigate infrastrure, and use other Apps with this VPN tunneling? If yes, what is the best way to do that? Regards, Chris

6 replies

gschmitt
New Member
July 3, 2015

Please check out this video from FortiNet

[link]https://www.youtube.com/watch?v=xSxuENsOuUw[/link]

chrbar
chrbarAuthor
New Member
July 3, 2015

Thanks gschmitt, but I would like to be able to etablish a SSL VPN connexion, not IPsec. Do you know if it's possible to do that under IOS? FortiClient does it under Android, but not under IOS, why?

 

gschmitt wrote:

Please check out this video from FortiNet

https://www.youtube.com/watch?v=xSxuENsOuUw

emnoc
New Member
July 3, 2015

Yes in short, & here's a cookbook

 

http://cookbook.fortinet.com/ssl-vpn-using-forticlient-for-ios/

 

just follow the example and test the phone device

 

chrbar
chrbarAuthor
New Member
July 3, 2015

Thanks emnoc But the App FortiClient for IOS doesn't run as a "true" VPN Client, we can open a SSL VPN connexion inside the App but not under the IOS to be able to use other App (as RDP) with this VPN tunnel. FortiClient for Android does it, but not FortiClient for IOS! Under IOS, when we open a SSL VPN connexion (with Dell NetExtender for example), a VPN sign appears at the top of the iPhone screen (see iphonevpn.jpg as attachment), but when we open a SSL VPN connexion with FortiClient, nothing appears!

 

emnoc wrote:

Yes in short, & here's a cookbook

http://cookbook.fortinet.com/ssl-vpn-using-forticlient-for-ios/

just follow the example and test the phone device

Chris_Lin_FTNT
Staff
Staff
July 3, 2015

FortiClient on iOS can only provide web portal function. It's not a tunnel. Why? Because Fortinet hasn't been able to access some privilege APIs from Apple.

chrbar
chrbarAuthor
New Member
July 6, 2015

Thanks Chris.

I hope Fortinet will be able to upgrade their App to tunnel functions... as SonicWALL Mobile Connect, or other VPN solution as Junos Pulse from Juniper.

As explained on this page, these app offer a layer-3 VPN on iOS devices:

https://kb.juniper.net/In...e=content&id=TN211

 

Chris.Lin wrote:

FortiClient on iOS can only provide web portal function. It's not a tunnel. Why? Because Fortinet hasn't been able to access some privilege APIs from Apple.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.