InfoSecMonkey: No fluff. Just the config that works.

Category Archives: VPN

FortiGate Agentless VPN

FortiGate Agentless VPN

Configure FortiGate Agentless VPN on FortiOS 7.6+. Learn to enable web mode, set up realms, portals, and bookmarks for secure remote access without a...

Read More
FortiGate IPsec Remote Access VPN with Microsoft Entra ID

FortiGate IPsec Remote Access VPN with Microsoft Entra ID

Configure FortiGate IPsec VPN with Microsoft Entra ID using SAML SSO. Step-by-step guide for FortiClient setup, certificate management, and claim mapping.

Read More
TCP Encpsulation of ESP Packets for VPN Tunnels

TCP Encpsulation of ESP Packets for VPN Tunnels

Configure FortiGate TCP encapsulation for ESP packets to bypass UDP 500/4500 blocks. Learn to set IKEv2 TCP transport via CLI or UI in FortiOS.

Read More
Direct Access through Split Tunnel VPN

Direct Access through Split Tunnel VPN

Configure FortiGate split tunnel negate to route specific FQDNs via the local default gateway. Use dstaddr-negate and split-tunneling-routing-negate commands.

Read More
Removing “Launch FortiClient” from FortiGate Web Portal VPN

Removing “Launch FortiClient” from FortiGate Web Portal VPN

Remove the Launch FortiClient button from your FortiGate Web Portal VPN login page. Edit realm HTML to hide the link for client-less SSL VPN...

Read More
Dynamic DNS Split-Tunneling for FortiGate VPN

Dynamic DNS Split-Tunneling for FortiGate VPN

Configure FortiGate DNS split tunneling to route specific domains to external resolvers. Learn to set up SSL-VPN portals for dynamic DNS routing.

Read More
Decreasing Fail-Over Time for Multi-Homed VPNs using DPD.

Decreasing Fail-Over Time for Multi-Homed VPNs using DPD.

Lower FortiGate VPN failover time from 90 to 20 seconds. Configure dpd-retrycount and dpd-retryinterval to speed up multi-homed VPN failover.

Read More
Deploying SSL VPNs Using Multiple Realms

Deploying SSL VPNs Using Multiple Realms

Configure FortiGate SSL VPN realms to separate corporate and contractor access. Use Active Directory and local users with distinct IP pools and policies.

Read More
FortiClient CLI for Linux using Realms

FortiClient CLI for Linux using Realms

Configure FortiClient CLI Linux realms for SSL-VPN access. Learn the exact command line syntax and FortiGate portal mapping steps to fix connection failures.

Read More
Limiting Protocols in FortiGate Web Access Portal VPN

Limiting Protocols in FortiGate Web Access Portal VPN

Configure FortiGate Web Portal VPN protocols to restrict user bookmarks to HTTP, HTTPS, and SSH. Apply this config to limit access.

Read More
2-Factor Auth Using Email on FortiGate

2-Factor Auth Using Email on FortiGate

Configure FortiGate email two-factor authentication via CLI. Set up the email server and create users for OTP delivery without extra licenses.

Read More
IPSec Remote Access VPN Naming Limitations on FortiGate

IPSec Remote Access VPN Naming Limitations on FortiGate

Learn how the FortiGate IPSec interface name limit affects your remote access VPN capacity. Calculate max tunnels based on the 15 character rule.

Read More
Troubleshooting FortClient VPN Connectivity Issues with FortiGate

Troubleshooting FortClient VPN Connectivity Issues with FortiGate

Resolve FortiGate FortiClient VPN troubleshooting issues with CLI commands, log analysis, and packet captures. Follow these steps to fix connectivity errors.

Read More
Running Post VPN Login Script

Running Post VPN Login Script

Configure FortiClient post login script execution for Windows and macOS. Learn to run batch files or applications on connect and disconnect events.

Read More
Create Custom Install Packages for FortiClient

Create Custom Install Packages for FortiClient

Learn how to create custom FortiClient install packages with pre-configured VPN settings using the FortiClient Configurator for silent deployments.

Read More
SSL VPN Realms with Custom URLs

SSL VPN Realms with Custom URLs

Configure FortiGate SSL VPN custom URLs for separate realms. Set distinct authentication methods for contractors and employees using custom domain names.

Read More
VX-LAN over IPSec using Fortigate Firewalls

VX-LAN over IPSec using Fortigate Firewalls

Configure Fortigate VXLAN over IPSec to extend Layer 2 networks. Includes Phase I/II setup, soft-switch commands, and firewall policies for working tunnels.

Read More
What Diffie-Hellman (DH) Group Should I Use

What Diffie-Hellman (DH) Group Should I Use

Learn Diffie-Hellman group selection for secure VPNs. Choose the right DH group for AES 128 or 256-bit keys and avoid weak groups like 24.

Read More