Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Steve_Fuller
New Contributor III

5.07 VPN Portal Add/Edit

Not sure when it was added, but I' m get an add/edit option on all web portals. Not sure whether the end user changed any settings, but I don' t remember seeing this security flaw before. Any ideas on how to remove?
2 REPLIES 2
neonbit
Valued Contributor

Hi Steve, I believe they enabled it by default after one of the 5.x upgrades. You can disable the users from adding/editing the bookmarks through the CLI with the following commands: config vpn ssl web portal edit web-access (or whatever the portals name is) set allow-user-bookmark disable end This will still allow you to create the bookmarks through the management interface, but prevent vpn users from creating/editing their own bookmarks. They' ve added a checkbox for this feature in 5.2 so you can do it in the GIU :)
Steve_Fuller
New Contributor III

set allow-user-bookmark disable
Thanks! I thought it might be personal bookmark but I wasn' t sure.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors