HID ActivID AAA OOB & SSL - Manual (Page 14)

4TRESS AAA Out-of-Band Authentication (SMS) and SSL VPN Fortinet | Integration Handbook
External Release | © 2012-2013 HID Global Corporation/ASSA ABLOY AB. All rights reserved. Page | 14
3.5 Procedure 5: Configure Routing for Tunnel Mode
If your SSL VPN operates in tunnel mode, then you must add a static route so that replies from the protected
network can reach the remote SSL VPN client.
To add the tunnel mode route - web-based manager, perform the following steps.
1. Logged into the FortiGate Web console, navigate to Router > Static > Static Route.
2. Click Create New.
3. Enter the Destination IP/Mask of the tunnel IP address that you assigned to the users of the web portal.
4. Select the SSL VPN virtual interface for the Device.
5. Click OK.