Fortigate 90G + SSLVPN + new firmwares (7.4.6 or 7.6.1)

[ITDepart]

Hi, can anyon clarify what is happening with Fortigate 90G and new firmware versions 7.4.6 or 7.6.1?
I have the Fortigate 90G + 7.4.5 + SSLPVN service in production without problems, but:

• on the one hand i read this:
  https://docs.fortinet.com/document/fortigate/7.4.6/fortios-release-notes/84653/ssl-vpn-not-supported...
• and on the other hand i read this:
  https://docs.fortinet.com/document/fortigate/7.4.6/administration-guide/140089/ssl-vpn-to-dial-up-vp...

Fortigate 90G has 8GB of RAM... what happend with SSLVPN if I will upgrade from 7.4.5 to 7.4.6?

Thanks!

[dingjerry_FTNT]

Hi @Team-IT ,

The info in the doc might not be accurate and our doc team may update it at any time.  Actually, I will submit a doc mantis for it.

AFAIK, all desktop form factor FGT models, except for FGT 120G, will not have SSL VPN.  So please consider it to be ready.

[ITDepart]

But why? I have it working right now (FG 90G + 7.4.5 + SSLVPN) without any problems!!

And why only to FG 90G? It doesn't make sense!!!

[ITDepart]

I think this is a very bad decision from Fortinet Team.... I bought this firewall 2 weeks ago to use with SSLVPN service.... :(

[dingjerry_FTNT]

Hi all,

I can see that there are many conversations in multiple mantises about this topic (the removal of SSL VPN web mode and tunnel mode).

So I think all documents related to this topic are subject to change for the information. I will keep an eye on it and may update this post if possible.

[solae]

Is there anything new (official) to this topic?

Is SSL-VPN Supported on 7.4.6 for 70F? What about 60F?

[Hysterical-Networks]

@solae - SSL-VPN is supported on FortiOS 7.4.6 for 70F and 60F, however it takes additional steps to enable after 7.4.4. Note that the feature does not appear as option in Feature Visibility GUI--you have to enable it by .... Appears Fortinet fixed that requirement in 7.6 (see my other reply below where it does appear in Feature Visibility GUI out of the box--just disabled by default).

Changes in default values | FortiGate / FortiOS 7.4.4 | Fortinet Document Library

I just factory imaged a 70F with 7.4.6 and took these screenshots for you:

Thanks,

Michael C (FCP)

[Hysterical-Networks]

Hi All,

I think there may be a lot of misunderstanding around the changes in FortiOS in versions 7.4.4 (and above) and 7.6.0 (and above) that impact proxy-related features and SSL-VPN.

Please refer to this Fortinet support article that describes the changes that impact desktop firewall models with 2GB of RAM. 

Special Notice for low end units (<2Gb... - Fortinet Community

To emphasize this point, I have pasted a photo of a FortiGate 70F (which has 4GB of RAM) running FortiOS 7.6.1. Note that SSL-VPN does not appear in the default VPN menu at the time of a fresh install, however the feature is there and just needs to be made visible under System->Feature Visibility.

Enjoy,

Michael C (FCP)

[ITDepart]

@Hysterical-Networks , we are talking about why a Fortigate 90G with 8Gb ram disables the SSLVPN tunnel mode.... it's crazy, for this model finally they re-activate... 

BUT FORTINET YOU ARE REALLY WEIRD!!!

Today we update our Fortigate 90G witn 8GB ram from 7.4.7 (with sslvpn tunnel mode active) to 7.4.8 and the SSLVPN dissapear!!!!

THIS IS REALLY WEIRD!!!

We contact to support a give me this answer:
---> https://docs.fortinet.com/document/fortigate/7.4.8/fortios-release-notes/743723/new-features-or-enha... <----
--> Resolved issued -> bug id 1026775 Remove SSL VPN from FG9xG.
WTF!!! Fortinet delete SSLVPN a publish in a resolved issue??????????

[Rino_B]

Please check SSL VPN support on FortiGate models: https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-support-on-FortiGate-models/ta-p/3...