Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor II

Connect VPN SSL by other WAN interface

Hi There,

We using Fortigate FG-60D.

please kindly advice in create policy.


we have 2 WAN connection.

WAN-2 dedicated for VPN connection to interface Port-1 (both for VPN IPSec point-to-point & VPN SSL for mobile user).

WAN-1 for daily operational.

Port-1 for Intranet.

Port-2 for front desk.


for our internal policy,

1. all front desk can't access our Intranet for work.

2. all front desk only connected to Port-2, and connect internet using WAN-1.


some staff front desk have special privilege to access Port-1, but must use vpn ssl connection.


1. we have create vpn ssl User for that staff

2. vpn ssl connection can be accessed by outside office.


summary for interfaces and policy:

1. WAN-1 for operational internet.

2. WAN-2 for dedicated to VPN IPSEC and VPN SSL

3. Port-1 for LAN

4. Port-2 for Wifi to Internet.


a. Port-1 -> WAN-1 is blocked.

b. Port-2 -> WAN-2 is allowed

c. VPNSSL(WAN-2) -> Port-1 is allowed

d. Port-1 -> WAN-2 is blocked


user can't connect to VPN SSL while use internet connection WAN-1.

looking for help / guidance please.


thanks in advance.

New Contributor II

hello there...anyone may have same advice/experience?


New Contributor II

hi.sorry forgot to mention.

our device is FG60D with firmware 5.2.10 build 742


currently, error message as below:

Warning --------------------------- Unable to establish the VPN connection. The VPN server may be unreachable.



New Contributor II

hello there..

need guidance here.

anyone can help?

thanks in advance


Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors