Added 2 new recommendations to the Fortigate SSL VPN Hardening Guide

This commit is contained in:
Yuri Slobodyanyuk
2023-03-19 16:59:49 +00:00
parent c066ef90f0
commit 97ac87f4ac
2 changed files with 121 additions and 121 deletions

View File

@@ -247,9 +247,9 @@ end
== Create a no-access portal and set it as default in the VPN settings
Once you have VPN SSL enabled, you *have* to specify the default portal
to which all unmapped to portals user will be assigned. To prevent unintended
users/groups connecting via default portal, create the one disabling all access
inside it and then set it as the default.
to which all unmapped to portals users will be assigned. To prevent unintended
users/groups connecting via this default portal, create the one disabling all
the access inside it and then set it as the default.
* Create a portal with no factual access:

View File

@@ -4,8 +4,8 @@
<< /Title (Fortigate VPN SSL Hardening Guide)
/Creator (Asciidoctor PDF 1.5.3, based on Prawn 2.2.2)
/Producer (Asciidoctor PDF 1.5.3, based on Prawn 2.2.2)
/ModDate (D:20230319165457+00'00')
/CreationDate (D:20230319165540+00'00')
/ModDate (D:20230319165933+00'00')
/CreationDate (D:20230319165941+00'00')
>>
endobj
2 0 obj
@@ -7718,7 +7718,7 @@ x
[<76616c696420544c532063657274696669636174652066726f6d206120747275737465642043412041> 20.0195 <7574686f72697479206f6e2065616368206c6f67696e20696e746f2056504e2053534c2c20746865792077696c6c20696d6d6564696174656c79>] TJ
ET
0.0 Tw
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
@@ -7867,12 +7867,12 @@ ET
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
1.173 Tw
1.173 Tw
BT
66.24 148.1583 Td
/F1.0 10.5 Tf
<796f75206e65656420746f206861766520706f7274203830206f70656e206f6e6c7920666f722074686520706572696f64206f662069737375696e672f72656e6577696e67207468652063657274696669636174652e20536f2c20796f75> Tj
<796f75206e65656420746f206861766520706f7274203830206f70656e206f6e6c7920666f722074686520706572696f64206f662069737375696e672f72656e6577696e67207468652063657274696669636174652e20536f2c20796f75> Tj
ET
@@ -7885,7 +7885,7 @@ ET
0.9551 Tw
BT
66.24 132.3783 Td
66.24 132.3783 Td
/F1.0 10.5 Tf
[<6d61> 20.0195 <79> 89.8438 <2c20696620796f752077616e7420746f2c20656e61626c6520696e636f6d696e6720706f72742038302066726f6d20616e> 20.0195 <79207768656e2072657175657374696e672063657274696669636174652c207468656e20636c6f7365>] TJ
ET
@@ -10657,122 +10657,122 @@ xref
/F1.0 10.5 Tf
<437265617465206120706f7274616c2077697468206e6f206661637475616c206163636573733a> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
q
0.9608 0.9608 0.9608 scn
52.24 550.37 m
543.04 550.37 l
545.2491 550.37 547.04 548.5791 547.04 546.37 c
547.04 429.19 l
547.04 426.9809 545.2491 425.19 543.04 425.19 c
52.24 425.19 l
50.0309 425.19 48.24 426.9809 48.24 429.19 c
48.24 546.37 l
48.24 548.5791 50.0309 550.37 52.24 550.37 c
h
f
0.8 0.8 0.8 SCN
0.75 w
52.24 550.37 m
543.04 550.37 l
545.2491 550.37 547.04 548.5791 547.04 546.37 c
547.04 429.19 l
547.04 426.9809 545.2491 425.19 543.04 425.19 c
52.24 425.19 l
50.0309 425.19 48.24 426.9809 48.24 429.19 c
48.24 546.37 l
48.24 548.5791 50.0309 550.37 52.24 550.37 c
h
S
Q
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 527.545 Td
/F4.0 11 Tf
<636f6e6669672076706e2073736c2077656220706f7274616c> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 512.805 Td
/F4.0 11 Tf
<ca202020656469742044656661756c744e6f416363657373> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 498.065 Td
/F4.0 11 Tf
<ca202020202020207365742074756e6e656c2d6d6f64652064697361626c65> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 483.325 Td
/F4.0 11 Tf
<ca20202020202020736574207765622d6d6f64652064697361626c65> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 468.585 Td
/F4.0 11 Tf
<ca2020202020202073657420697076362d74756e6e656c2d6d6f64652064697361626c65> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 453.845 Td
/F4.0 11 Tf
<ca2020206e657874> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 439.105 Td
/F4.0 11 Tf
<656e64> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
-0.5 Tc
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
q
0.9608 0.9608 0.9608 scn
52.24 550.37 m
543.04 550.37 l
545.2491 550.37 547.04 548.5791 547.04 546.37 c
547.04 429.19 l
547.04 426.9809 545.2491 425.19 543.04 425.19 c
52.24 425.19 l
50.0309 425.19 48.24 426.9809 48.24 429.19 c
48.24 546.37 l
48.24 548.5791 50.0309 550.37 52.24 550.37 c
h
f
0.8 0.8 0.8 SCN
0.75 w
52.24 550.37 m
543.04 550.37 l
545.2491 550.37 547.04 548.5791 547.04 546.37 c
547.04 429.19 l
547.04 426.9809 545.2491 425.19 543.04 425.19 c
52.24 425.19 l
50.0309 425.19 48.24 426.9809 48.24 429.19 c
48.24 546.37 l
48.24 548.5791 50.0309 550.37 52.24 550.37 c
h
S
Q
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 527.545 Td
/F4.0 11 Tf
<636f6e6669672076706e2073736c2077656220706f7274616c> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 512.805 Td
/F4.0 11 Tf
<ca202020656469742044656661756c744e6f416363657373> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 498.065 Td
/F4.0 11 Tf
<ca202020202020207365742074756e6e656c2d6d6f64652064697361626c65> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 483.325 Td
/F4.0 11 Tf
<ca20202020202020736574207765622d6d6f64652064697361626c65> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 468.585 Td
/F4.0 11 Tf
<ca2020202020202073657420697076362d74756e6e656c2d6d6f64652064697361626c65> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 453.845 Td
/F4.0 11 Tf
<ca2020206e657874> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
59.24 439.105 Td
/F4.0 11 Tf
<656e64> Tj
ET
0.0 0.0 0.0 SCN
0.0 0.0 0.0 scn
-0.5 Tc
0.2 0.2 0.2 scn
0.2 0.2 0.2 SCN
BT
56.8805 401.226 Td
/F1.0 10.5 Tf
<a5> Tj
ET
0.0 0.0 0.0 SCN