SSL-VPN only specific certificate

[3dBConsult]

Good morning.

We have recently created a certificate to use in the SSL-VPN, we activated the certificate and people with the certificate connected perfectly.

But people without the certificate can connect too, we want only people with that specific certificate be able to connect to the VPN.

How can we block people without the certificate?

Thanks a lot for your help.

[ozkanaltas]

Hello @3dBConsult ,

You can review this document about certificate authentication on FortiGate SSL VPN.

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/266506/ssl-vpn-with-certific...

[pminarik]

The solution depends on how the users are authenticating.
Do you expect them to provide only the certificate, or the certificate + username + password?