Define an SSL VPN Portal element

Create an SSL VPN Portal element to define the settings for connecting to the SSL VPN Portal and the look and feel of the SSL VPN Portal.

Before you begin

You must have an SSL VPN Portal Policy.

For more details about the product and how to configure features, click Help or press F1.

Enable the SSL VPN Portal for each NGFW Engine that provides SSL VPN Portal access.

Use this dialog box to define the properties of an SSL VPN Portal element.

Option	Definition
General tab
Name	The name of the SSL VPN Portal element. The name must only contain letters, numbers, dashes (-), and underscores (_).The name cannot contain spaces.
SSL VPN Portal Policy	The policy defines the SSL VPN Portal services and access control rules of the portal. Click Select to select an element.
Hostnames	Domain names and IP addresses of the SSL VPN Portal. Click Add to add a row to the table, or Remove to remove the selected row. Enter the domain name or IP address that the user enters in their web browser to access the SSL VPN Portal.
Server Credentials	The TLS Credentials for the SSL VPN Portal element. The TLS Credentials element contains the private key and the certificate for establishing SSL connections to the SSL VPN Portal. Click Select to select an element.
Use Self-Signed Certificate	Allows you to create and use a self-signed certificate. Deselect if you want to select a TLS Credentials element.
Category (Optional)	Includes the element in predefined categories. Click Select to select a category.
Comment (Optional)	A comment for your own reference.

Option	Definition
Look & Feel tab
Title (Optional)	The title shown in the end user's web browser when they access the SSL VPN Portal webpage.
Look & Feel	Select a default theme or create a custom theme.
SSL VPN Portal Theme	Select a Light or a Dark theme for the SSL VPN Portal. The selection does not affect the appearance of the SSL VPN Logon Page.
Logon Page Background (Optional)	The background image for the SSL VPN Portal Logon page. Click Browse to select the .png file. Click None to remove the previous .png file selection.
Brand Color (Optional)	Allows you to select your company's brand color for the portal.
Company Logo (Optional)	The company logo shown in the SSL VPN Portal. Click Browse to select the .svg file. Click None to remove the previous .svg file selection.
Favicon (Optional)	The icon shown in the end user's web browser when they access the SSL VPN Portal webpage. Click Browse to select the .ico file. Click None to remove the previous .ico file selection.
Preview SSL VPN Portal Logon Webpage (Optional)	Click to open a preview of the SSL VPN Portal Logon webpage in a web browser.
Preview SSL VPN Portal Webpage (Optional)	Click to open a preview of the SSL VPN Portal webpage in a web browser.

Option	Definition
Target Engine tab
Target Engine	The NGFW Engines that provide SSL VPN Portal access. Note: You must separately enable the SSL VPN Portal for each NGFW Engine in the Engine Editor.
Port	The port to use for SSL connections to the SSL VPN Portal. The default port is 443.
Add	Adds an entry to the Target Engine table.
Remove	Removes the selected entry from the Target Engine table.

Option	Definition
Advanced tab
Idle Timeout	Sets the length of idle time before the user is automatically logged out of the SSL VPN Portal.
Session Timeout	Sets the length of the user session before the user is automatically logged out of the SSL VPN Portal.
Log Level for SSL VPN Portal Services	Select one of these options: None — Does not create any log entry. Transient — Creates a log entry that is displayed in the Current Events mode in the Logs view (if someone is viewing it at the moment), but is not stored. Stored — Creates a log entry that is stored on the Log Server. This is the default log level for SSL VPN Portal Services. Essential — Creates a log entry that is shown in the Logs view and saved for further use. Alert — Triggers the alert you add to the Alert field.
Allow Persistent User Sessions (Optional)	When selected, users remain logged on to the SSL VPN Portal even after closing the browser until the defined session timeout is reached.
Allow Empty Referrer in HTTP Headers (Optional)	When selected, web browsers are not required to include referrer information in HTTP headers.
Set to Default	Discards the changes and reverts to the default settings.