What step is required an SSL VPN to access to an internal server using port forward mode?

Virtual IP addresses are typically configured for tunnel mode SSL VPNs, not for port forward mode, which establishes a direct, application-specific connection.

While FortiClient can be used for SSL VPN, port forward mode often uses a web-based Java applet without requiring a full client installation.

While realms can separate user groups, creating a realm specifically "reserved for clients using port forward mode" is not a mandatory *step* for port forward mode to function, but rather an organizational choice.

In SSL VPN port forward mode, the client application needs to be configured to forward traffic destined for the internal server to a specific local port, which is then handled by the Java applet proxy that establishes the tunnel through the FortiGate.