Forticlient 6.0 - Unable to have unique VPN connection for concurrent users on Shared VM

[vishstuff12]

Hi Team,

I am using Forticlient 6.0 standalone on a Virtual machine which is shared by multiple users with unique logins.

When 2 user concurrently login to the VM and then login to the Forticlient VPN concurrently it overrides users sessions.

Unable to have unique VPN connections for each concurrent users on Shared VM.

Please let me know how to resolve this i

Regards,

Vishal

[AEK]

Hi Vishal

If I'm not wrong, FortiClient is designed to run single instance and connect to one VPN server at a time.

If you want multiple concurrent VPN connections on the same machine then you should use other VPN clients.

[vishstuff12]

Hi AEK,

We want is multiple users to connect to same VPN server at the same time using Forticlient which is installed on the shared VM. With shared VM multiple users can connect to the VM at the same time.

[Marthen2]

Hello,

it's not possible due computer design. There is only one routing table/network stack shared by all resources in operating system.

You can do multiple vpn sessions only in ssl vpn web mode from web browsers, not in tunnel mode with Forticlients.

If you need tunnel mode, you must have dedicated VMs for each user

[AEK]

In addition to Marthen's very good suggestion about Web mode VPN, in case you still prefer tunnel mode from one shared VM, there may be another possible solution. You can for example establish one single IPsec VPN tunnel between your VM and the FG, then use active portal so that each user wants to access the resources will authenticate and get the access to the its authorized resources only.

Actually I didn't test it but I think it should work.

[vishstuff12]

Thank you for the response. I will try the web mode and if doesn't work then might go the tunnel option.

[vishstuff12]

Thank you for the response. Can you please send me links to documentation on web mode and also anything more I need to install?

[AEK]

Hi Vishal

Here is a quick tutorial.

https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/579694/ssl-vpn-web-mode-for-remote-user

In newer versions Web mode VPN is hidden by default and you need to enable it.

https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/100733/ssl-vpn-web-mode