Technical Tip: SSL VPN web mode certificate error

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 196405

Description
This article discusses about SSL VPN web mode certificate error.

Solution
When accessing the SSL VPN via WEB mode a certificate warning message as below can appears.

The reason of this warning, is that FortiGate by default uses a self-signed certificate as a server certificate which the browser cannot recognize.

Download the self-signed certificate and install it in the browser-trusted root authority’s folder.
Further, buy an external CA certificate and import in FortiGate is possible.
External CA certificate is no need to import in the user browser as all browsers will be aware of public CA certificates.

7894

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.