ZTNA using SSL VPN

[systemgeek]

I know Fortinet is doing away with SSL VPN.  I am close to moving off SSL VPN and going to Dialup IPSec VPN.  However, its taking a while due to issues I am working with support on.  At the same time I am trying to get my head around ZTNA and from what I have been reading ZTNA uses SSL VPN too but in a more secure way.

Please tell me that ZTNA using SSL VPN is NOT going to be going away any time soon????  I am looking to use ZTNA so users can access internal websites on port 443, SSH to hosts, RDP to hosts.  I know there are different methods for each of these.  I just want to make I am not wasting my time by setting this up with ZTNA.

[atakannatak · Accepted solution]

Hi @systemgeek ,

Fortinet is not planning to drop ZTNA support from FortiOS based on the Fortinet’s roadmap and recent releases (7.2, 7.4, 7.6) have added more ZTNA capabilities, not reduced them. In fact, ZTNA is one of the core strategic feature they are actively investing in. If anything changes (e.g. ZTNA moving to a separate license SKU), it would likely affect licensing or architecture, not the existence of ZTNA itself.

So basically you’re safe investing in ZTNA policies — it's not a dead-end.

BR.

If my answer provided a solution for you, please mark the reply as solved it so that others can get it easily while searching for similar scenarios.

CCIE #68781

[systemgeek]

Thank you.  So if I cannot get Dialup IPsec working very soon I will pivot to ZTNA even in a basic form sooner then latter.