Technical Tip: Changes on SSL VPN modes starting from v7.6.3

[SAJUDIYA]

Description	This article describes SSL VPN changes that were applied from v7.6.3.
Scope	FortiGate v7.6.
Solution	From v7.6.3, SSL VPN tunnel mode has been removed, leaving only web mode (which will be referred to as Agentless VPN) on some models: Agentless VPN is disabled by default, and to enable it, run the following command: config system global     set sslvpn-web-mode enable end Once Agentless VPN is enabled from the CLI, to view it on the GUI, run the following command: config system settings     set gui-sslvpn enable end Once the above changes are done, in the VPN section, it will show Agentless VPN Portals and Agentless VPN Settings. To avoid any issues, migrate SSL VPN to IPsec VPN. Follow the instructions in IPsec and SSL VPN or Agentless VPN. Note: FortiGate models with 2GB of RAM or less do not support tunnel mode or web mode; instead, dial-up IPsec VPN would need to be used, as explained in SSL VPN to dial-up VPN migration. Also, a few affected models are listed here: Agentless VPN (formerly SSL VPN web mode) not supported on FortiGate 40F, 60F, and 90G series models...  For 50G, 70G and 90G models, the SSL VPN has been removed in 7.4.8: SSL VPN not supported on FortiGate G-Series Entry-Level models. Related documents: Agentless VPN v7.6.3 Migration from SSL VPN tunnel mode to IPsec VPN v7.6.3