Web Mode allows users to access network resources, such as the Internal Segmentation Firewall (or ISFW) used in this example.
Users connecting via Tunnel Mode will be able to access the internet, but with all traffic passing through the FortiGate, protected by your FortiGate’s security policies and profiles. The FortiGate will also verify that the remote user’s AntiVirus software is installed and up-to-date. This example assumes that you have already created an SSL user account and SSL-users group.
The recipe for this video is available here.