Added 2 new recommendations to the Fortigate SSL VPN Hardening Guide

This commit is contained in:
Yuri Slobodyanyuk
2023-03-19 16:59:49 +00:00
parent c066ef90f0
commit 97ac87f4ac
2 changed files with 121 additions and 121 deletions

View File

@@ -247,9 +247,9 @@ end
== Create a no-access portal and set it as default in the VPN settings == Create a no-access portal and set it as default in the VPN settings
Once you have VPN SSL enabled, you *have* to specify the default portal Once you have VPN SSL enabled, you *have* to specify the default portal
to which all unmapped to portals user will be assigned. To prevent unintended to which all unmapped to portals users will be assigned. To prevent unintended
users/groups connecting via default portal, create the one disabling all access users/groups connecting via this default portal, create the one disabling all
inside it and then set it as the default. the access inside it and then set it as the default.
* Create a portal with no factual access: * Create a portal with no factual access:

View File

@@ -4,8 +4,8 @@
<< /Title (Fortigate VPN SSL Hardening Guide) << /Title (Fortigate VPN SSL Hardening Guide)
/Creator (Asciidoctor PDF 1.5.3, based on Prawn 2.2.2) /Creator (Asciidoctor PDF 1.5.3, based on Prawn 2.2.2)
/Producer (Asciidoctor PDF 1.5.3, based on Prawn 2.2.2) /Producer (Asciidoctor PDF 1.5.3, based on Prawn 2.2.2)
/ModDate (D:20230319165457+00'00') /ModDate (D:20230319165933+00'00')
/CreationDate (D:20230319165540+00'00') /CreationDate (D:20230319165941+00'00')
>> >>
endobj endobj
2 0 obj 2 0 obj
@@ -7718,7 +7718,7 @@ x
[<76616c696420544c532063657274696669636174652066726f6d206120747275737465642043412041> 20.0195 <7574686f72697479206f6e2065616368206c6f67696e20696e746f2056504e2053534c2c20746865792077696c6c20696d6d6564696174656c79>] TJ [<76616c696420544c532063657274696669636174652066726f6d206120747275737465642043412041> 20.0195 <7574686f72697479206f6e2065616368206c6f67696e20696e746f2056504e2053534c2c20746865792077696c6c20696d6d6564696174656c79>] TJ
ET ET
0.0 Tw 0.0 Tw
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
@@ -7867,12 +7867,12 @@ ET
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
1.173 Tw 1.173 Tw
BT BT
66.24 148.1583 Td 66.24 148.1583 Td
/F1.0 10.5 Tf /F1.0 10.5 Tf
<796f75206e65656420746f206861766520706f7274203830206f70656e206f6e6c7920666f722074686520706572696f64206f662069737375696e672f72656e6577696e67207468652063657274696669636174652e20536f2c20796f75> Tj <796f75206e65656420746f206861766520706f7274203830206f70656e206f6e6c7920666f722074686520706572696f64206f662069737375696e672f72656e6577696e67207468652063657274696669636174652e20536f2c20796f75> Tj
ET ET
@@ -7885,7 +7885,7 @@ ET
0.9551 Tw 0.9551 Tw
BT BT
66.24 132.3783 Td 66.24 132.3783 Td
/F1.0 10.5 Tf /F1.0 10.5 Tf
[<6d61> 20.0195 <79> 89.8438 <2c20696620796f752077616e7420746f2c20656e61626c6520696e636f6d696e6720706f72742038302066726f6d20616e> 20.0195 <79207768656e2072657175657374696e672063657274696669636174652c207468656e20636c6f7365>] TJ [<6d61> 20.0195 <79> 89.8438 <2c20696620796f752077616e7420746f2c20656e61626c6520696e636f6d696e6720706f72742038302066726f6d20616e> 20.0195 <79207768656e2072657175657374696e672063657274696669636174652c207468656e20636c6f7365>] TJ
ET ET
@@ -10657,122 +10657,122 @@ xref
/F1.0 10.5 Tf /F1.0 10.5 Tf
<437265617465206120706f7274616c2077697468206e6f206661637475616c206163636573733a> Tj <437265617465206120706f7274616c2077697468206e6f206661637475616c206163636573733a> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
q q
0.9608 0.9608 0.9608 scn 0.9608 0.9608 0.9608 scn
52.24 550.37 m 52.24 550.37 m
543.04 550.37 l 543.04 550.37 l
545.2491 550.37 547.04 548.5791 547.04 546.37 c 545.2491 550.37 547.04 548.5791 547.04 546.37 c
547.04 429.19 l 547.04 429.19 l
547.04 426.9809 545.2491 425.19 543.04 425.19 c 547.04 426.9809 545.2491 425.19 543.04 425.19 c
52.24 425.19 l 52.24 425.19 l
50.0309 425.19 48.24 426.9809 48.24 429.19 c 50.0309 425.19 48.24 426.9809 48.24 429.19 c
48.24 546.37 l 48.24 546.37 l
48.24 548.5791 50.0309 550.37 52.24 550.37 c 48.24 548.5791 50.0309 550.37 52.24 550.37 c
h h
f f
0.8 0.8 0.8 SCN 0.8 0.8 0.8 SCN
0.75 w 0.75 w
52.24 550.37 m 52.24 550.37 m
543.04 550.37 l 543.04 550.37 l
545.2491 550.37 547.04 548.5791 547.04 546.37 c 545.2491 550.37 547.04 548.5791 547.04 546.37 c
547.04 429.19 l 547.04 429.19 l
547.04 426.9809 545.2491 425.19 543.04 425.19 c 547.04 426.9809 545.2491 425.19 543.04 425.19 c
52.24 425.19 l 52.24 425.19 l
50.0309 425.19 48.24 426.9809 48.24 429.19 c 50.0309 425.19 48.24 426.9809 48.24 429.19 c
48.24 546.37 l 48.24 546.37 l
48.24 548.5791 50.0309 550.37 52.24 550.37 c 48.24 548.5791 50.0309 550.37 52.24 550.37 c
h h
S S
Q Q
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
59.24 527.545 Td 59.24 527.545 Td
/F4.0 11 Tf /F4.0 11 Tf
<636f6e6669672076706e2073736c2077656220706f7274616c> Tj <636f6e6669672076706e2073736c2077656220706f7274616c> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
59.24 512.805 Td 59.24 512.805 Td
/F4.0 11 Tf /F4.0 11 Tf
<ca202020656469742044656661756c744e6f416363657373> Tj <ca202020656469742044656661756c744e6f416363657373> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
59.24 498.065 Td 59.24 498.065 Td
/F4.0 11 Tf /F4.0 11 Tf
<ca202020202020207365742074756e6e656c2d6d6f64652064697361626c65> Tj <ca202020202020207365742074756e6e656c2d6d6f64652064697361626c65> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
59.24 483.325 Td 59.24 483.325 Td
/F4.0 11 Tf /F4.0 11 Tf
<ca20202020202020736574207765622d6d6f64652064697361626c65> Tj <ca20202020202020736574207765622d6d6f64652064697361626c65> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
59.24 468.585 Td 59.24 468.585 Td
/F4.0 11 Tf /F4.0 11 Tf
<ca2020202020202073657420697076362d74756e6e656c2d6d6f64652064697361626c65> Tj <ca2020202020202073657420697076362d74756e6e656c2d6d6f64652064697361626c65> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
59.24 453.845 Td 59.24 453.845 Td
/F4.0 11 Tf /F4.0 11 Tf
<ca2020206e657874> Tj <ca2020206e657874> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
59.24 439.105 Td 59.24 439.105 Td
/F4.0 11 Tf /F4.0 11 Tf
<656e64> Tj <656e64> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn 0.0 0.0 0.0 scn
-0.5 Tc -0.5 Tc
0.2 0.2 0.2 scn 0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN 0.2 0.2 0.2 SCN
BT BT
56.8805 401.226 Td 56.8805 401.226 Td
/F1.0 10.5 Tf /F1.0 10.5 Tf
<a5> Tj <a5> Tj
ET ET
0.0 0.0 0.0 SCN 0.0 0.0 0.0 SCN