Access FortiGate via Mgmt port through SSL VPN Connection

[msaad]

Hello,

I've a remote SSL Vpn connection in my environment, after I logged in by vpn

1. can I manage FortiGate via it's MGMT port "OOB" ? , and what if it is configured as "set dedicate-to management" 2. What type configuration needed routes, policies, etc if required ?

Thanks

[Toshi_Esumi]

1. If you are coming from the same internet connection users are using to get in via SSL VPN, it's not out-of-band  but in-band. "dedicated" management interface is isolated from other part (root).

2. I would suggest setting an interface IP on ssl.root and enable SSH or HTTPS to admin, which would be the closest to out-of-band if you would ignore it's sharing the same internet circuit with users. No policy is necessary for this.