can' t surf to https://<FortiGate_IP_address>:10443/remote/login

[#1]

Hello, I have a fortinet 60C to configure I enabled ssl vpn using the document FortiOSâ„¢ Handbook: SSL VPN V3 01-431-112804-20110624 for FortiOS 4.0 MR3 using example 1. I can' t surf to https://<FortiGate_IP_address>:10443/remote/login I have configured all steps. SSL VPN is enabled, I didn' t change the port(port is 10443),and i created the policy with the web based manager & cli. Thanks to help me.

[ede_pfau]

Hi, and welcome to the forums. Obviously you are trying to set up a web-portal SSL VPN, right? The example unfortunately mixes instructions for web-portal access and SSL tunnel access. Both modes have different policies, action=SSLVPN or action=ACCEPT. Routing and IP range configuration is only necessary with tunnel mode. Be sure to check if the SSLVPN port really is set to 10443, in System>Admin>Settings, SSLVPN Login Port. This port must not be used anywhere else on the FGT.

[FortiRack_Eric]

Perhaps stupid question, where you are connecting from is port 10443 blocked?

[#4]

Hello, I created a new SSL VPN service. With the port TCP 10443. I created a firewall policy to enable this service from wan1 to all. This solved my problem! Thanks for the tip. Eric

[ede_pfau]

As like for most topics, there' s a writeup for debugging VPNs posted here: http://yurisk.info/2009/04/21/debug-vpn-in-fortigate-seeing-is-believing/ Yuri has posted some other useful experiences with Fortinets and other firewalls.