Fortinet FORTIOS V3.0 MR7 - Manual (Page 38)

FortiOS v3.0 MR7 SSL VPN User Guide
38 01-30007-0348-20080718
Configuring SSL VPN settings Configuring a FortiGate SSL VPN
Setting the client authentication timeout setting
The client authentication timeout setting controls how long an authenticated
connection will remain connected. When this time expires, the system forces the
remote client to authenticate again.
For example, to change the authentication timeout to 1800 seconds, enter the
following commands:
config vpn ssl settings
set auth-timeout 1800
end
Adding a custom caption to the web portal home page
You can add a custom caption (maximum 31 characters) to the top of the web
portal home page.
To add a custom caption
1 Go to VPN > SSL > Config.
2 In the Portal Message field, type the caption.
3 Select Apply.
Adding WINS and DNS services for clients
You can specify the WINS or DNS servers that are made available to SSL-VPN
clients.
1 Go to VPN > SSL > Config.
2 Select the blue triangle to open the Advanced section.
3 Enter the IP addresses of one or two DNS Servers to be provided for the use of
clients.
4 Enter the IP addresses of one or two WINS Servers to be provided for the use of
clients.
Redirecting a user group to a popup window
The FortiGate unit redirects web browsers to the web portal home page after the
remote client has been authenticated and the user has logged in successfully.
As an option, you can have the FortiGate unit display a second HTML page in a
popup window when the client web browser is redirected to the web portal home
page. To support this feature, the level of security settings associated with the
Internet zone in the web browser must be set to permit popup windows.
The following procedure assumes that SSL VPN user groups have been defined
(see
“Configuring user accounts and SSL VPN user groups” on page 42 ). A
different popup window can be specified per user group.
To display a custom popup window for a user group
1 Go to User > User Group.
Note: The default value is 1500 seconds. You can only modify this timeout value in the CLI.