Need help setting up user account for VPN

[CraigV75]

Morning All,

VERY new to Fortigate firewalls (and firewalls in general).

I have to allow 2 users for VPN access. Both have accounts created in AD and have been added to the correct VPN group in AD as well.

How do I go about creating them as users on the firewall?  TIA!

[Fullmoon]

have you tried links below?

https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/690301/configuring-the-ssl-vpn-tunnel

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/559546/ssl-vpn-full-tunnel-for-remote-us...

[sruthi_reddy]

Hello Craig,

You need to create users and user groups on Firewall first:

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/518646/users-and-user-groups#User_groups

Then you have to add these users or user groups to SSL VPN settings and Firewall policies where it is required.

[ede_pfau]

One unasked for, but well meant advice:

if you are unexperienced with Fortigates, start out with a simple setup, a VPN with local users. When you have this working, configure an LDAP server on the FGT and use this for VPN authentication. It's not rocket science, but you need to have a good understanding of your AD structure and the way a FGT queries it.

[rwpatterson]

ede_pfau wrote:

One unasked for, but well meant advice:

if you are unexperienced with Fortigates, start out with a simple setup, a VPN with local users. When you have this working, configure an LDAP server on the FGT and use this for VPN authentication. It's not rocket science, but you need to have a good understanding of your AD structure and the way a FGT queries it.

+1