FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
sgiannogloudis
Article Id 214332
Description This article describes how to configure the SSL VPN width and height settings to have the optimal RDP resolution on users' screens.
Scope FortiOS v7.0.6 and above and 7.2.0 and above.
Solution

There are different ways to configure RDP scaling inside FortiOS:

 

  1. Under the SSL VPN web portal:

 

config vpn ssl web portal

    edit "RDP_Portal"
        set tunnel-mode enable
        set web-mode enable
        set ip-pools "SSLVPN_TUNNEL_ADDR1"
            config bookmark-group
                edit "gui-bookmarks"
                    config bookmarks
                        edit "RDP"
                            set apptype rdp

                            set host "192.168.1.1"
                            set port 3389

                            set width (0-65535, default = 0)
                            set height (0-65535, default = 0)
                        next
    end

 

  1. Under Personal or User group bookmarks:

     

    conf vpn ssl web [user-group-bookmark | user-bookmark]
        edit "fortinet#"
            config bookmarks
                edit "RDP-BOOKMARK"
                    set apptype rdp
                    set host "10.10.10.10"
                    set port 3389

                    set width (0-65535, default = 0)
                    set height (0-65535, default = 0)
                next

    end

     

     

  2. Under the SSL VPN web portal:

     

        edit "RDP_Portal"
            set tunnel-mode enable
            set web-mode enable
            set ip-pools "SSLVPN_TUNNEL_ADDR1"

            set default-window-width  0  (default 1024)

            set default-window-height 0   (default 768)

    end

     

     

It is necessary to have web-mode enabled on the portal to see the 'default-window' settings.

To achieve full screen when using RDP, these settings and the bookmark settings must be set to 0 as explained in scenario 3 which will scale with a full-screen browser window.

 

There are three factors which decide the final outcome of how RDP will scale:

 

  1. If width & height settings under the bookmark are non-zero values, then these values will be used.
  2. If the width & height settings under the bookmark are zero and the width/height settings under the portal are not zero, then FortiOS will use the setting configured under the portal.
  3. If width & height settings are zero under both bookmark and portal, then RDP will auto-scale based on individual users' browser's window size.

 

For users with small displays, such as a 13-inch screen display, sometimes the black bars appear at the top and the bottom of the page, even after the above changes.

 

To display full screen for such devices, proceed with the following steps :

 

  1. Press F11 and login in the Portal.
  2. Then, the display scale to the F11 (Fullscreen).

 

Afterward, it should be possible to use the whole display.