2 separate SSLVPNs with 2 separate SSL certificates

[jimmy10]

Hi,

I am trying to figure out if I can setup 2 separate SSLVPNs with 2 separate SSL certificates, but I am getting nowhere.

Is this possible?

[funkylicious]

Hi,

As far as I know, you cannot defined 2 different certificate under the SSLVPN settings.

What you can do, is defined within the certificate 2 SANs resolving in the same IP address of the FGT listening on SSLVPN.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HTTPS-SSL-Certificate-Installati...

[ebilcari]

Are you trying to configure two completely different SSL VPN using two different public IPs and Domains (URL) or just need two URL and certificates pointing on the same SSL VPN IP/interface?

[jimmy10]

Hi ebilcari,

I just need two URL and certificates pointing on the same SSL VPN IP/interface.

[ebilcari · Accepted solution]

Than the only possible way as also suggested previously is to use a single certificate with multiple SAN. This can be easily done in a private CA but for public signed certificates it may be difficult to get.

In case you need separate SSL VPN configurations, you could also use VDOMs. It allows individual SSL VPN configurations for each VDOM in the FGT.