Description
The Connection tool widget in SSL VPN web portal can be modified specifying applications or protocols that users can use to connect to a VPN destination.
This FortiOS v5.0 feature is not available in v5.2.
In v5.2 all standard applications/protocols are available in SSL VPN web portal "Connection tool widget", user access can be restricted via the firewall policy, specifying the service.
Solution
CLI Configuration
FortiOS v5.0
config vpn ssl web portal
edit full-access
config widget
edit 3
set allow-apps ftp rdp smb ssh vnc web
end
end
end
On FortiOS v5.2 restrict user access via service in firewall policy
config firewall policy
edit <SSLVPN_policy_ID>
set service "FTP" "SMB" "RDP" "SSH" "VNC" "HTTPS" "HTTP"
end
