Firewall : Fortinet - Certificate Based SSL VPN
You will configure an SSL VPN tunnel that requires users to authenticate using a certificate.
This recipe requires that you have three certificates:
CA certificate
server certificate (signed by the CA certificate)
user certificate (signed by the CA certificate)
You will install the CA certificate and server certificate on the FortiGate. The user certificate will be installed on the remote user’s PC. The certificates in the example were created using OpenSSL.
For Documentation:-
http://kb.fortinet.com/kb/microsites/...