Description
This article describes a step-by-step guide to configure an Automation Stitch on FortiGate to automatically disconnect all active SSL VPN users at a specified time.
Scope
FortiGate Firewall.
Solution
The solution involves creating an Automation Stitch that triggers at a scheduled time to execute a CLI command, disconnecting all SSL VPN users. The process encompasses defining a trigger based on a schedule, creating an action to run the CLI script, and assembling these components into a stitch.
Step 1: Access the Automation Section.
- Navigate to Security Fabric -> Automation tab.
Step 2: Create a New Stitch.
- Select Create New to initiate a new Automation Stitch.
- Enter a meaningful Name and Description.
- Set Status to Enabled.
- Choose Action Execution as Sequential to ensure orderly execution of steps.
Step 3: Define the Trigger.
- Select the Trigger tab within the stitch configuration.
- Select Create to define a new trigger.
- Choose Schedule as the trigger type.
Step 4: Configure Schedule Trigger.
- Provide a Name for the trigger.
- Specify the Frequency (e.g., daily, weekly) and set the exact Time (e.g., 06:00 AM) when the disconnection should occur.
- Select OK to save the trigger.
Note: For this example, the trigger is configured to activate daily at 6:00 AM.
Step 5: Associate Trigger with Stitch.
- Return to the main stitch configuration screen.
- Select the newly created trigger from the list to associate it with the stitch.
Step 6: Define the Action.
- Select the Action tab.
- Select Create, then select CLI Script as the action type.
Step 7: Input CLI Script.
- Enter a Name for the action.
- In the script field, input the following command:
execute vpn sslvpn del-all
This command disconnects all active SSL VPN users.
- Select OK to save the action.
Step 8: Finalize and Enable.
Confirm all settings and select OK to create the Automation Stitch.
Verification :
To verify the configuration, run the following CLI command :
get vpn ssl monitor
diagnose test application autod 3
