Fortigate 100E - Any way to disable the SSL-VPN web portal but still allow SSL-VPN clients to connect?
Yes. Change the VPN portal settings to disable web mode but allow tunnelled mode.
The login screen will always be visible - it is shared between tunnel- and web-mode.
The only thing you can do is disable webmode in our VPN portal configs, this will result in the web-mode based login leading to a “use FortiClient” screen.
Like somebody answered before, the login page will always be visible.
However, you can edit the SSL VPN Login page HTML code from System > Replacement messages and make the login page blank.
If you don’t want to use full tunnel mode just enable split tunneling, or look up “split tunnel ssl for remote users fortigate” in google and follow those docs.
Was able to remove this by setting it from allow access to all and restricting it to a select few IP’s. Then pointed them at our internal IP’s. Nothing will happen if anyone signs in, but I was concerned with a browser attack with it being public facing even with all access denied. Made a great target for cred harvesting.
I replaced mine with this just to be cheeky:
DISK EXTENDED COLOR BASIC 1.1
COPYRIGHT (C) 1982 BY TANDY
UNDER LICENSE FROM MICROSOFT
OK
> _
Just found this, love it. Stealing it.
Thanks!
to funny, stealing it 