Technical Tip: SSL VPN Redundancy

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 189668

Description

This article describes how to achieve SSL VPN redundancy using two WAN links.

Solution

Use the following steps in order to guarantee VPN connectivity to any of both WAN interfaces.

Define them in VPN -> SSL-VPN Settings -> Listen on Interface(s) and make sure that both are added.

Or by CLI:

config vpn ssl settings
set source-interface "wan1" "wan2"
end

Note: Adding multiple interfaces in the 'Listen on Interface(s)' field does not require a reboot and also does not cause any disconnections for the existing connected SSL VPN users.

Create a firewall policy for each WAN interface as shown in the document:

SSL VPN using web and tunnel mode.

4708

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.