If the FortiClient version supports the feature, then it will automatically utilize the functionality advertised by the FortiGate (that is no corresponding configuration needed on FortiClient or EMS). The above option is CLI-only on the FortiGate. In the CLI for the FortiGate SSL-VPN Settings ( config vpn ssl settings), enable tunnel-connect-without-reauth:
Note that this feature is independent of the 'Save Password' or 'Always Up (Keep Alive)' SSL-VPN features (meaning 'Allow client to save password' and 'allow client to keep connections alive'), and so the feature are not required to be enabled on the FortiGate or FortiClient.įortiGate Tunnel-Mode SSL-VPN (available with FortiOS 6.2 and later) no need for end-users to accept MFA token pushes or input token codes).
This feature is particularly useful when administrators are combining Multi-Factor Authentication (MFA) with username/password authentication, as it allows users to reconnect to the SSL-VPN without requiring them to re-authenticate (i.e. This article describes a feature on the FortiGate that will allow FortiClient SSL-VPN users to automatically reconnect to the VPN in the event of a temporary drop in network connectivity.
0 kommentar(er)
