How can you distinguish between a Fortigate management page and a VPN login page during penetration testing?

You can differentiate them by the redirect URL. The management page redirects to `/login?redir=%2F`, while the VPN login page redirects to `/remote/login?lang=en`. Directly accessing the IP and examining the response helps identify which page is returned. For more on similar identification techniques, see the other articles in the [Penetration Basics](/news/penetration-basics-fortigate-identification-and-version-detection) series, such as [Zimbra version detection](/news/penetration-basics-zimbra-version-detection).