Skip to main content
airprakken
New Member
May 27, 2009
Question

Testing SSL VPN from inside?

Sorry if this is silly but I find no references in the forums or docs or KB. I am configuring a simple, browser-only SSL VPN and attempting to test it from inside the network the FG is securing. I worked on this a number of hours, testing from inside the secured network, but always get Error:Permission denied when I attempt to log in to the VPN. Then I finally decided to go to town and access the Internet from another place -- and the VPN works fine! I must be missing some firewall rule or that there is something else preventing this. I would really prefer to sit here in my office rather than at Starbucks to do this work. Summary: FG50B running v4.0.2,build0099,090407 3 VLAN' s inside, one of which is where I want to go with the VPN from the outside. Using a PC on any of the 3 VLAN' s, including one which is routed ONLY to the Internet, I always am prevented from logging in to the VPN. I use the appropriate port on the outside static IP of the FG device and get clear through to the login screen before being denied at login. If I go somewhere else and access the Internet doing EXACTLY the same thing to the same IP address (I just refresh the same browser window on the same netbook with a new connection), I can log in, so the basic config is fine. Thanks for any help. Randy in Oregon

    4 replies

    rwpatterson
    New Member
    May 28, 2009
    Welcome to the forums Randy. By design, you cannot connect to the SSL VPN from the inside. You' re already on the inside, so the connection fails. Best bet is to grab some wireless from the air, or get a separate cable connection for testing. Sorry I couldn' t give you better news...
    Esteemed Contributor III
    May 28, 2009
    Create a SSLVPN policy from the " inside" interface to itself. --Ali
    rwpatterson
    New Member
    June 2, 2009
    ORIGINAL: ayazdi Create a SSLVPN policy from the " inside" interface to itself. --Ali
    Never too old to learn something new... ;)
    airprakken
    New Member
    June 2, 2009
    That works fine Ali -- thanks
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT