Configuring SSL VPN settings
Setting the client authentication timeout setting
Adding a custom caption to the web portal home page
Adding WINS and DNS services for clients
Redirecting a user group to a popup window
38
The client authentication timeout setting controls how long an authenticated
connection will remain connected. When this time expires, the system forces the
remote client to authenticate again.
Note: The default value is 1500 seconds. You can only modify this timeout value in the CLI.
For example, to change the authentication timeout to 1800 seconds, enter the
following commands:
config vpn ssl settings
set auth-timeout 1800
end
You can add a custom caption (maximum 31 characters) to the top of the web
portal home page.
To add a custom caption
1
Go to VPN > SSL > Config.
2
In the Portal Message field, type the caption.
3
Select Apply.
You can specify the WINS or DNS servers that are made available to SSL-VPN
clients.
1
Go to VPN > SSL > Config.
2
Select the blue triangle to open the Advanced section.
3
Enter the IP addresses of one or two DNS Servers to be provided for the use of
clients.
4
Enter the IP addresses of one or two WINS Servers to be provided for the use of
clients.
The FortiGate unit redirects web browsers to the web portal home page after the
remote client has been authenticated and the user has logged in successfully.
As an option, you can have the FortiGate unit display a second HTML page in a
popup window when the client web browser is redirected to the web portal home
page. To support this feature, the level of security settings associated with the
Internet zone in the web browser must be set to permit popup windows.
The following procedure assumes that SSL VPN user groups have been defined
(see
"Configuring user accounts and SSL VPN user groups" on page
different popup window can be specified per user group.
To display a custom popup window for a user group
1
Go to User > User Group.
Configuring a FortiGate SSL VPN
42). A
FortiOS v3.0 MR7 SSL VPN User Guide
01-30007-0348-20080718