The End of the SSL VPN Era: FortiOS 7.6.3 Marks a Turning Point

Fortinet has officially ended support for SSL VPN tunnel mode in FortiOS 7.6.3, signaling a significant shift in remote access solutions. This change removes both GUI and CLI support for SSL VPN tunnel mode, and existing configurations will not be upgraded during firmware updates .​

What Does This Mean for You?

If your organisation relies on FortiGate firewalls for remote access, this update requires immediate attention. SSL VPN tunnel mode is no longer available, and users must migrate to IPsec VPN to maintain secure remote connectivity

Key Changes in FortiOS 7.6.3:

• Removal of SSL VPN Tunnel Mode: Both GUI and CLI support for SSL VPN tunnel mode have been removed.​

• No Upgrade of Existing Configurations: SSL VPN tunnel mode settings will not be carried over during firmware upgrades

Why the Change?

This move aligns with Fortinet’s strategy to enhance security and performance by consolidating remote access methods. IPsec VPN offers robust encryption and better performance, making it a reliable alternative to the deprecated SSL tunnel mode

What Should You Do Next?

1. Assess Your Current Setup: Identify all existing SSL VPN tunnel mode configurations and users.​
2. Plan the Migration: Follow Fortinet’s migration guides to transition to IPsec VPN.​
3. Test the New Configuration: Ensure that the new IPsec VPN setup meets your security and usability requirements.​
4. Update Documentation: Revise network diagrams and documentation to reflect the changes.​

Fortinet provides detailed resources to assist with the migration process. It’s crucial to begin planning and implementing these changes promptly to ensure uninterrupted remote access for your users.

For more information and guidance, refer to Fortinet’s official documentation:​

• SSL VPN Tunnel Mode No Longer Supported

The era of SSL VPN tunnel mode has concluded. Embrace the future of secure remote access with IPsec VPN.

Need Assistance?

If you require support during this transition to IPsec VPN, we are here to help. Our team can guide you through the migration process to ensure a seamless and secure remote access solution.