Category Archives: VPN

31 December, 2019

Wrong Egress Interface when using VPN

Resolve FortiGate VPN egress interface routing issues. Learn how to fix return traffic path problems in route-based site-to-site VPNs with BGP.

15 November, 2019

Site-to-Site VPN with Checkpoint Stand-Alone

Configure a Checkpoint site-to-site VPN. Set up Phase I and Phase II proposals, define encryption domains, and create necessary NAT rules for connectivity.

12 November, 2019

Troubleshooting IPSec VPNs on Fortigate Firewalls

Master Fortigate IPSec VPN troubleshooting with diagnose commands. Fix Phase I mismatches, PFS errors, and selector issues using real debug output examples.

10 November, 2019

Route-Based VPN between Cisco Router and Fortigate Firewall using OSPF

Configure a route-based VPN between Cisco Router and Fortigate using OSPF. Get working VTI configs for IKEv1 and IKEv2 with no fluff.

20 October, 2019

IPv6 VPNs in Fortigate Firewalls

Configure FortiGate IPv6 VPN tunnels with Phase I and II settings. Learn to set up address objects, policies, and static routes for secure IPv6...

10 September, 2019

Adding DNS Suffix to your SSL VPN

Fix SSL VPN hostname resolution by adding a DNS suffix via FortiGate CLI. Learn the exact command to append search domains for non-FQDN lookups.

9 September, 2019

Using Let’sEncrypt with Fortigate Firewalls

Configure Fortigate firewalls to use Let's Encrypt certificates. Follow this step-by-step guide to automate SSL renewal and secure your web services.

3 September, 2019

VPN Hair-Pinning on Fortigate Firewalls

Configure Fortigate VPN hair-pinning to route traffic between spokes via the hub. Learn to adjust Phase II selectors and firewall policies for secure spoke-to-spoke...

27 August, 2019

Single Sign On with Fortigate VPN

Configure FortiGate VPN single sign-on to eliminate double authentication for RDP sessions using the web portal or client-less VPN.

11 August, 2019

Installing FortiClient on Ubuntu Linux for SSL VPN

Install FortiClient on Ubuntu Linux for SSL VPN access. Follow these steps to extract, configure, and connect to your FortiGate securely.

15 July, 2019

Fortitoken Push Notification without FortiAuthenticator

Configure FortiGate push notification for FortiToken without a FortiAuthenticator server. Follow these CLI and GUI steps to enable MFA push alerts for local users.

15 May, 2019

UPDATED – Certificate Pinning you SSL VPN with Microsoft CA and Fortigate Forticlient Using ‘user’ certificates

Configure FortiGate SSL VPN certificate pinning using Microsoft CA and OCSP. Secure access with user certificates and FortiClient for trusted devices.

20 April, 2019

Secure LDAP and AD Password Change via Forticlient

Configure FortiGate LDAPS password change via FortiClient. Import CA certificates, create secure LDAP profiles, and enable AD password resets in SSL-VPN.

9 April, 2019

Configuring LDAP Authentication for Remote Access VPN

Configure Fortigate LDAP authentication for remote access SSL VPNs. Step-by-step guide to connect Active Directory, create user groups, and apply policies.

11 February, 2019

Site-to-Site VPN Between Fortigates using Certificates instead of PSK

Configure Fortigate site-to-site VPN certificates for IPsec authentication. Learn to generate CSRs, sign them with OpenSSL, and set up PKI users for secure tunnel...

20 December, 2018

Multi-Regional AD VPN using Fortigate Firewalls and BGP

Configure FortiGate AD VPN BGP with route reflectors and IPLC failover. Ensure dynamic site-to-site connectivity and regional redundancy for global networks.

1 September, 2018

IKEv2 Dynamic Remote Fortigate to Head-In ASA

Configure Fortigate to ASA IKEv2 dynamic remote tunnels. Get the CLI commands for FortiGate Phase I/II and Cisco ASA crypto maps for secure site-to-site...

22 May, 2018

Remote Access VPN with ASA as a client

Configure a Fortigate ASA site-to-site VPN with dynamic IPs. This guide shows how to set up IKEv1 tunnels, NAT exemptions, and routing for remote...