Chapter 3 Authentication for FortiOS 5.0 : Users and user groups : User groups : Firewall user groups : SSL VPN access
  
SSL VPN access
In any firewall user group, you can enable SSL VPN access and select the web-portal that the users can access. When the user connects to the FortiGate unit via HTTPS on the SSL VPN port (default 10443), the FortiGate unit requests a username and password.
SSL VPN access also requires an SSL VPN security policy (Action is SSL VPN) with an identity-based rule enabling access for the user group. For more information, see the FortiOS Handbook SSL VPN chapter.