SSL VPN

Use these steps only if applicable to your environment.

This feature is typically used for encrypted remote access. To minimize the risk of unauthorized remote access, you must restrict access to essential hosts, ports, protocols, and services.

1. Navigate to Network > SSL VPN > Server Settings.

   

2. In the SSL VPN SERVER SETTINGS section, change the SSL VPN Port.

   The Enable Web Management over SSL VPN option should only be enabled if absolutely necessary (leave it disabled otherwise).

3. Set up clients and limit access to hosts, networks, ports, and protocols:

   1. Navigate to Network > SSL VPN > Client Settings and create an SSLVPN IP Pool for clients.
   2. Select only the required access, which could be to a specific host, a range of hosts, or a network for client routes.
   3. Navigate to Device > Users > Local users & Groups and ensure that the relevant user or group is part of SSLVPN services.
   4. In VPN Access, select the address object used when the client route was defined.