How to Configure IPsec VPN Remote Access on FortiGate Firewall FortiOS 7

[@MambasAdventureOfficial]

Idol this is new to me. Having internal bleeding rigth now..biro lang. Thank you very interesting and informative 🙂👍

[@Filipcondal]

Sending support here watching from UK keep blogging.

[@westernkitchenvlog9373]

Salamat sa bagong kaalaman na tinuturo sa pamamagitan ng tutorials.

[@serafinjepa9594]

Ayus idol lakai Thank you for your help with this kind of video material ..salamat sa info

[@IgoroTech-Official]

Salamat lakai! 😉😁

[@jezzedtv2154]

Thank u for sharing, ganda po ng mga content mo,, makkatulong po ito ng mabuti..lalo na related computer :)

[@scarletyuri4912]

Very informative sir. Thanks for sharing.. Godbless

[@ananpaopramot5776]

I'm newbie. Really good of detail explaination. Thanks.

[@IgoroTech-Official]

Welcome! cheers!

[@familytournamentchannel]

Thank you for the info. Keep uploading.

[@fakizgamingchannel6197]

Interesting lodz, thanks for this very knowledgeable video

[@pachinchannel]

I have this question, at the split tunneling options if I choose the option "all" at the accesible networks I just don't have internet, but if I choose one of my LANs (I have 2), there is no problem at all with the internet.. Need to access both LANs from my VPB because one if for servers and the other lan is for users so that's my problem

[@IgoroTech-Official]

hi there, for the internet issue, you need to create a policy: SSL-VPN tunnel interface to your WAN interface. for you to access both LAN, you need also to create policies: SSL-VPN tunnel interface to LAN/internal interface and SSL-VPN tunnel interface to LAN 2 or VLAN interface (LAN 2). hope I understand your question.

[@pachinchannel]

@@IgoroTech-Official hey thanks for answer and I dont have problems getting access to both lans just problem with Internet, no ping response to dns internet ips for example

[@IgoroTech-Official]

@@pachinchannel yes correct, once you connected to the SSL VPN, you can access the LAN but you cannot connect to the internet right? if yes then create a policy: SSL-VPN tunnel interface to your WAN interface if you disabled split tunneling.

[@IgoroTech-Official]

@@pachinchannel If you want your internet traffic also to pass to the remote site then disable split tunneling but you need to create policy for LAN and policy for internet, if you want only to access the remote site LAN but you want to use your own internet connection then enable the split tunneling but you have to add both of your LAN address on the "Routing Address"

[@pachinchannel]

@@IgoroTech-Official routing address.. thats it, going to try it. Thanks again

[@varaprasad4115]

Thank you so much for sharing this useful video and explanation

[@BhuvanTechTalk]

Useful session thanks

[@IgoroTech-Official]

Thanks and welcome

[@lerasplay1819]

Thankyou for sharing very impormative

[@lebonblaantv3282]

Ayus lodz thanks for sharing. Baking kaybigan mo to

[@RedAppleAqua]

good video and helped me to figure out my problem with vpn. thanks

[@jhayzdg6196]

Yes i learned this video watching out there and it get an idea here,yes may napulot naman akong aral

[@delearth2820]

New learning about this and thanks for the info godbless you

[@anilbeharry]

very good video.

[@JustinaLiliura]

Thank you the explanation is very clear

[@draw_]

Thank you for sharing this info, this might just be the answer to my problem.

[@indaytorion3524]

Thank u for give information about this pvn ner

[@wendyswarrior679]

thank you for sharing this video ,it will help a lot

[@joyannmeneses512]

Very informative. nice content keep it up 👍

[@simanlalakbaytv1261]

Thanks for sharing!

[@ubebarnimel6767]

Thanks for sharing 🤠

[@lokiebalot4100]

thank you sir my bago akung natutunan sayo

[@dowatv6638]

Thank you again for the information

[@rezalbarando7248]

brilliant idea, thanks for sharing

[@maureenlopez6854]

nice video very informative, thanks for the information, i learned a lot

[@animates_shorts22]

Thanks for this video. My question is, can I use my spare public IP for the VPN and not the IP that is configured on forti interface?

[@MostafaEl-Shamy]

Great video, I would like you to help me with something I have noticed you configured FortiClient using FQDN, in our setup, we use public static IP which configured in the interface and static routes we have no issues with that setup everything is working perfectly now we would like to use FQDN instead of IP, i have checked many sources and I have a rough idea of what is needed but I'm not able to actually implement it I got too much confused that I was not sure what was correct and what was not if you can provide some insight on how to move forward, it would be much appreciated

[@IgoroTech-Official]

hi there, I used the DDNS (Dynamic Domain Name System). To configure DDNS, you may follow this guide: kzbin.info/www/bejne/nH-qo6tpnLlprbM

[@MostafaEl-Shamy]

@@IgoroTech-Official thanks for the reply, I know about DDNS But, are you aware of other methods I have watched other video there was no mention of DDNS as per his diagram there was a local DNS server involved and he pointed out where to add the server IP in the IPSec configuration I tried to get in touch with him but no reply

[@IgoroTech-Official]

@@MostafaEl-Shamy your goal is to use the domain instead of the static IP address right? if i understand it correctly, then yes, the process is you need to configure the DDNS first, after that, use the domain you configured on the DDNS to connect to the VPN like what I did in the video.

[@ALONSHANKS]

Hi Sir, i have been a silent viewer for quite sometime now. and i appreciate what you do. i have a question regarding this set up. i actually followed everything until the end, though i succeded in configuring the vpn. i still cannot access/ping our local servers although the vpn already says it's connected to the network? i highly appreciate your input into this. more power!

[@netconfig999]

Thanks you for your sharing

[@esmail88]

I'm a noob , for this to work a static public IP by the ISP is a must ?

[@IgoroTech-Official]

hi, you don't need to have a static public IP address because FortiGate have the feature to configure DDNS (Dynamic Domain Name System). So instead of using the public IP address which constantly changes (if you don't have static IP), you will use the DDNS. You can check my other video on how to configure DDNS. thanks

[@esmail88]

@@IgoroTech-Official thanks you for the fast detailed response

[@nengsweetie7051]

Thank you now I know thank for informative tutorial for VPN id

[@adayinlife1001]

Just a question is. How to use domain name for Remote Access instead of IP address. Please help!

[@IgoroTech-Official]

hi there, you need first to configure the dynamic DNS, you can follow this guide; kzbin.info/www/bejne/nH-qo6tpnLlprbM after you configure the domain then you can use it instead of the IP address.

[@ayoubzamame758]

I followed those steps and now I can connect to the vpn if I used the private address but I can't connect using the private IP address how I can solve this problem. and thank you verry much

[@mrriderchef]

Wow amazing helpful

[@zchantzis]

Because my fortigate 60f is behind router isp i can't setup WAN public interface?

[@IgoroTech-Official]

hi there, depends on your internet plan, if you have a fixed public IP address included, if not then you need to configure private IP address then configure the DMZ on your ISP router pointing to the firewall's private IP address.

[@janjan-cm1wc]

Ah grabe connect connect sakit nyan sa ulo, thank you sa chiqah

[@harisankar_nc]

grt

[@martialdrabo8938]

J'ai fait la meme configuration mais mon trafic n'a pas de retour, il est seulement connecté au VPN packet envoyé mais sans retour

[@fbifido2]

how to make split-dns work, with dns name from the VPN network, so as not to be using IP-Address to connect to the VPN resources?????????

[@ramsingh-oj1li]

Nice

[@yashrienfiona5797]

Salamat sa oag chiqah

[@chinmoybharali5177]

My IPSEC VPN shows inactive

[@truonghongminh9950]

thanks

[@siarheiprymachonak5687]

Not work, delete_phase1_sa error in events

[@chillzandfriendz9384]

Gusto ko po ung dini-discuss nyo pero ayaw po ng utak ko, haha.