Technical Tip: How to verify the SSL VPN connection type (Web mode or Tunnel mode)

[lgupta]

Description	This article describes how to verify the SSL VPN connection type of connected users.
Scope	FortiGate.
Solution	Step 1: Add an 'SSL VPN' Monitor which is under the Network Section as described here: Technical Tip: Monitor tab from GUI. Step 2: Under the Dashboard, it is possible to see this new Monitor, and select it to open. Here there will be a list of users that are connected to SSL VPN and under the 'Connections' column, it is possible to see if the user is connected via Web Mode or Tunnel Mode. In order to find out the connection type on CLI, run the following command and look for the 'task' keyword. diagnose vpn ssl list [2273:root]sconn=0x7fd2756ee000, from(10.5.28.2) task=tunnel2_loop, fd=34(1:1),35(1:1),-1(0:0),-1(0:0),-1(0:0), pending=0 <- Tunnel mode. [2273:root]sconn=0x7fd27561e800, from(10.5.28.2) task=ap_read_request, fd=32(1:1),-1(0:0),-1(0:0),-1(0:0),-1(0:0), pending=0 <- Web mode.