Do we need to use the client certificate when connecting to SSL VPN, when do we need it?

[kiri · Accepted solution]

Hi Destan,

That is not a must, it depends on your needs.
It is not something that you can just enable, that will most likely break things.
You can use if for the following:

SSL VPN with certificate authentication
https://docs.fortinet.com/document/fortigate/6.2.12/cookbook/266506/ssl-vpn-with-certificate-authent...

SSL VPN with LDAP-integrated certificate authentication
https://docs.fortinet.com/document/fortigate/6.2.12/cookbook/751987/ssl-vpn-with-ldap-integrated-cer...

Here are more examples with different SSL VPN deployments:

https://docs.fortinet.com/document/fortigate/6.2.12/cookbook/490351/ssl-vpn-authentication

- Have you found a solution? Then give your helper a "Like" and mark the solution.

[Destan]

Thanks for the reply. It gave me a clear understanding of what SSL VPN is and does.