FortiGate Administration Guide - FirewallShop.com

User groups
User
Override Time
Protection Profiles
Available
Permission Granted
For
Configuring SSL VPN user group options
Go to User > Group and select the Edit icon for an SSL VPN user group. Expand
the SSL-VPN User Group Options section.
For detailed instructions about how to configure web-only mode or tunnel mode
operation, see the FortiGate SSL VPN User Guide.
Figure 266:SSL-VPN user group options
Select to set the duration of the override:
Constant Select to set the duration of override in days,
hours, minutes.
Ask
Select to allow the authenticating user to
determine the duration of override. The duration
set is the maximum.
List of defined protection profiles configured (available for Firewall
or Active Directory user groups only).
One protection profile can have several user groups with override
permissions. Verification of the user group occurs once the
username and password are entered. The overrides can still be
enabled/disabled on a profile-wide basis regardless of the user
groups that have permissions to override the profile.
Select the protection profiles that will have override privileges within
the user group.
Enable SSL-VPN Tunnel
Service
Allow Split Tunneling
Restrict tunnel IP
range for this group
Select to allow users in this group to connect to the network
behind the FortiGate unit using the SSL VPN tunnel. Not
available in Transparent mode.
Select to allow split tunneling for this group. Split tunneling
ensures that only the traffic for the private network is sent to
the SSL VPN gateway. Internet traffic is sent through the
usual unencrypted route.
Type the starting and ending IP address range for this group
if you want to override the Tunnel IP range defined in VPN >
SSL > Config.
FortiGate Version 3.0 MR5 Administration Guide
392 01-30005-0203-20070830