FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
preetisingh
Staff
Staff
Article Id 405529
Description This article describes how to limit protocols for SSL VPN personal bookmarks.
Scope FortiGate.
Solution
By default, when users connect to a FortiGate in Web Portal mode, they can create bookmarks using an available protocol e.g. HTTP/HTTPS, FTP, CIFS/SMB, RDP, SSH, TELNET, VNC, Citrix, etc.
 
Protocols available for bookmark creation can be defined as below:
 
Example configuration to allow only HTTP/HTTPS and FTP:
 
config vpn ssl web portal 
    edit "<portal name>"
        set web-mode enable
        set allow-user-access web ftp        <----- HTTP/HTTPS and FTP protocol allowed for bookmark creation.
    next
end
 
Once this is saved, users will be limited to configured protocols when they set up a new bookmark.
 
new.png