SSO Groups Not Accessible via UI in FOSv6 for SSL-VPN Interface

Adding FSSO groups in firewall policies via UI is not available when the policy’s source interface is set to SSL-VPN.

Workaround: Configure VPN firewall policy from CLI.

config firewall policy

edit <firewall-policy-ID>

unset srcint

set group <fsso group>

set srcint ssl.<vdom>

end