When enabled, a checkbox for the corresponding option appears on the VPN log in screen in FortiClient, and is disabled by default. These options affect how the FortiClient application behaves when connected to the FortiGate VPN tunnel. There is always a default pool available if you do not create your own. Select an IPv6 pool for users to acquire an IP address when connecting to the portal. These settings determine how tunnel mode clients are assigned IPv6 addresses. Select to configure and enable tunnel mode access. Select an IPv4 pool for users to acquire an IP address when connecting to the portal.

Traffic intended for the routing address will not be split from the tunnel. If you enable split tunneling, you are required to set the address that your corporate network is using. The user’s other traffic follows its normal route. Select so that the VPN carries only the traffic for the networks behind the FortiGate unit. These settings determine how tunnel mode clients are assigned IPv4 addresses. Once they are logged in to the portal, they cannot go to another system and log in with the same credentials until they log out of the first connection. Set the SSL VPN tunnel so that each user can only be logged in to the tunnel one time per user log in. Limit Users to One SSL VPN Connection at a Time

Configure the following settings, then select OK to create the profile.

Click Create New in the toolbar, or right-click and select Create New.

Go to VPN Manager > SSL-VPN and select Portal Profiles in the tree menu.

To create SSL VPN portal profiles, you must be logged in as an administrator with sufficient privileges.

Forticlient ssl vpn download