Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
chrbar
New Contributor

SSL VPN tunnel under Apple IOS?

Hello, We use two FortiGate 3700D (HA cluster) running FortiOS 5.2.3,build0670, managed from FortiManager 5.2.2-build0706 150415. We're testing the SSL VPN features and FortiClient. Everything runs correctly under Windows, Mac OSX, Linux and Android. We meet some difficulties under Apple IOS (iPad and iPhone). Currently we use NetExtender from SonicWALL (Dell), which runs as VPN Client under all OS. But the App FortiClient under Apple IOS doesn't run as VPN Client, we can etablish a VPN connexion inside the App but not under the IOS to be able to use other App (as RDP) with the VPN tunnel. Could you tell me if it's possible to etablish a VPN connexion from Apple IOS device to a Fortigate infrastrure, and use other Apps with this VPN tunneling? If yes, what is the best way to do that? Regards, Chris

6 REPLIES 6
gschmitt
Valued Contributor

Please check out this video from FortiNet

[link]https://www.youtube.com/watch?v=xSxuENsOuUw[/link]

chrbar

Thanks gschmitt, but I would like to be able to etablish a SSL VPN connexion, not IPsec. Do you know if it's possible to do that under IOS? FortiClient does it under Android, but not under IOS, why?

 

gschmitt wrote:

Please check out this video from FortiNet

https://www.youtube.com/watch?v=xSxuENsOuUw

emnoc
Esteemed Contributor III

Yes in short, & here's a cookbook

 

http://cookbook.fortinet.com/ssl-vpn-using-forticlient-for-ios/

 

just follow the example and test the phone device

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
chrbar
New Contributor

Thanks emnoc But the App FortiClient for IOS doesn't run as a "true" VPN Client, we can open a SSL VPN connexion inside the App but not under the IOS to be able to use other App (as RDP) with this VPN tunnel. FortiClient for Android does it, but not FortiClient for IOS! Under IOS, when we open a SSL VPN connexion (with Dell NetExtender for example), a VPN sign appears at the top of the iPhone screen (see iphonevpn.jpg as attachment), but when we open a SSL VPN connexion with FortiClient, nothing appears!

 

emnoc wrote:

Yes in short, & here's a cookbook

http://cookbook.fortinet.com/ssl-vpn-using-forticlient-for-ios/

just follow the example and test the phone device

Chris_Lin_FTNT

FortiClient on iOS can only provide web portal function. It's not a tunnel. Why? Because Fortinet hasn't been able to access some privilege APIs from Apple.

chrbar

Thanks Chris.

I hope Fortinet will be able to upgrade their App to tunnel functions... as SonicWALL Mobile Connect, or other VPN solution as Junos Pulse from Juniper.

As explained on this page, these app offer a layer-3 VPN on iOS devices:

https://kb.juniper.net/In...e=content&id=TN211

 

Chris.Lin wrote:

FortiClient on iOS can only provide web portal function. It's not a tunnel. Why? Because Fortinet hasn't been able to access some privilege APIs from Apple.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors