Technical Tip: SSL VPN connection to a Loopback In...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 328376

Description

This article describes how to use an SSL VPN connection to a Loopback Interface using Virtual IP and some SSL VPN hardening recommendations.

Scope

FortiGate.

Solution

Configure Loopback Interface.

FortiGate WAN Interface and static route (port2 in this example).
Configure Virtual IP using External IP address (port2) and loopback Interface and Port forwarding to VPN port.
Configure SSL VPN using Loopback Interface.
Configure the Firewall policy for VIP access from outside.
Configure the Firewall policy for SSL VPN users.
To harden the SSL VPN service to protect against failed login attempts, further restrictions can be put on the source on the WAN to Loopback policy to specify allowed Geographical locations.
Connect to the SSL VPN using the Virtual IP.
SSL VPN user list:

4381

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: SSL VPN connection to a Loopback Interface using Virtual IP