SSL VPN port blocked

[#1]

Hi experts we have remote clients connecting via ssl vpn into our network. This works fine. But some times our remote clients sit behind a firewall which is blocking port 10443. I can not modify the remote firewalls, I have to cope with this blocked port here with our own Fortigate unit. I can change the SSL VPN port. But if I move the VPN port to 443 I lose the ability to access the Web Administration over https on 443. Since two services can not share the same port, can I spread the services over multiple IP addresses? Is it possible to build a port forwarding or something like this? Best regards, Lars

[hidayet]

Hi lk, This is not possible

[#3]

So I have to choose my poison. In this case I swap the HTTPS port with the SSL VPN port. VPN access is more important than remote management of the FGT.

[hidayet]

Certainly more important vpn

[rwpatterson]

If you create an SSL login for yourself, you can manage from the inside. More secure anyway.

[claumakurumure]

Hi there, How about http or ssh are they also blocked? you might as well connect to the fortigate http://<IP_Address> if you enable administrative access on it.

[lmuir]

Why not just change the HTTPS admin port? Eg make the HTTPS admin port 10443 and the SSL VPN 443.

[#8]

Hi Imuir, this is exactly what I did now. FGT Management from external (wan1) will be disabled anyway soon after successful testings. Grz Lars