20. Adding a redundant VPN tunnel to 2nd Remote FortiGate

[@graciejiujitsusayville7108]

Hi Devin, these are great videos, thank you for sharing. . Question for you though. My company has a new customer, they're a local bank with about 35 remote offices that want to roll out Fortigates at every local branch, they currently have a HA primary secondary setup at Hq with 2 separate ISPs. They have their own /24 block and use BGP to advertise to each provider. Each branch is using ELAN with VPN backup. At HQ they also have a router that is sitting in the DMZ nat'd to a public IP off there /24 block. I recommended just having all the branches build a tunnel from the new Fortigates we deploy through the HQ Fortigate to this DMZ router. My concern was if we build tunnels from Fortigate to Fortigate to every circuit at Hq from the branch then we'd have to manage over 60 separate tunnels (2 for each branch) to the head end, 1 for each ISP. I've watched through many of your videos to see if the Fortigate can leverage the SDWAN feature to make this more seamless but it doesn't look like it's possible. Is there a video that mentions this type of scenario. Thank you for all that you do, you've helped me lesson the learning curve by watching all of your content!

[@ricardodressenetti907]

Good Job !! What's the configuration the Static Routes ? Tks....

[@inialation]

Good video, I'm doing alot of work with SD-WAN ATM