Unable to configure SSL-VPN with FortiGate 60B

[Mahendra varma]

Hello,

I have purchased Fortinet FortiGate 60B product which provides Blended Security Threats and with that I want to configure SSL-VPN.

I have gone through the basic regulations to follow everythings seems right on the above but when I try to login with the username in the web-browser, It gives me an error message - "Error:Unavailable information".
I'm using the built-in certificate "Fortinet_Local" (valid until 2026).

What is this and how do I get rid of this,please help..

Thanks in Advance.

[Jannat]

As per my knowledge Fortinet is rapidly becoming one of the lead firewall manufacturers. Their products are outstanding and the 60B is no exception, which by the way, has the same operating system as their enterprise and ISP grade products. Their UTM concept (a/v, web filtering, IPS, etc.) is well executed and very fast. This is a "real" firewall in every respect, with DMZ port, VPN and the capability of applying traffic rules to all inbound or outbound traffic. The Fortigate GUI is very well thought out and there are a myriad of capabilities available here and even more can be done from the command line.

I never had this kind of problem anyway before..

[Billie]

Here i will provide you the configuration PDF for Fortinet FortiGate 60B please reinstall your earlier installation and re-configure it as per PDF.

http://www.get-it.th.com/it_knowledg...tall_Guide.pdf

Hope this will help you.

[GunFighter]

Even when I login with wrong password it gives the same error message.

This is what I configured in the Fortigate:
I created a user, and added it to the SSL VPN group.
I gave him access to SSL-VPN tunnel service and to all web applications.

In the VPN section, I enabled the SSL-VPN, chose the "Fortinet_Local" as server certificate. Encryption I set on Low (even though I tried with all), require client certificate not enabled (even though it didn't work also when it was enabled).

In the firewall section, in the Address, I added ip range for internal network and external for the IP that the router is giving to the VPN clients.
In the firewall policy, I added a new one, source is external, destination is internal, action is ssl-vpn and allowed the user group of the SSl-vpn.

Then I installed on the client the certificate "Fortinet_local", opened internet explorer, logged in with the user/pass but it didn't work...