FortiGate: Configure IPSec with FortiClient using Certificate authentication/local CA

Configure IPSec with FortiClient using Certificate authentication/local CA
0:00 Overview
1:08 2 Implementation Comparisons
1:28 Implementation #1 - Certificate creation
3:12 Implementation #1 - FortiGate Configuration
7:32 Implementation #1 - FortiClient Configuration/Testing
9:17 Implementation #1 - Explanation of Certificate Placement/Testing
11:31 Implementation #2 - Certificate creation
12:52 Implementation #2 - Certificate import
13:14 Implementation #2 - FortiGate Configuration
14:55 Implementation #2 - FortiClient Configuration/Testing
15:27 Implementation #2 - Certificate + Credential Authentication with XAUTH

[@netconfig999]

thanks you for sharing this VD

[@maheshkulkarni7236]

I have Cert Chain as - Root CA, Intermediate CA and Client certificate. Do i need seperate Certificate for Fortigate under SSL VPN-Settings Server Certificate?

[@maheshkulkarni7236]

Can you please share video for SSL VPN with FortiClient using Certificate Auth please ?

[@DJ-jh2hd]

How about machine certificate? So you want just a certificate for machines to restrict which machines are used to connect to SSL VPN or maybe this is done with another feature / product

[@tothepointfortinet3823]

You should be able to use a similar process to make machine cerrt work too. Ie. I see no reason why machine cert won't work

[@michait3866]

Will it work with certificates signed with OpenSSL?

[@tothepointfortinet3823]

Yes that should work

[@michait3866]

@@tothepointfortinet3823 Managed to perform test connection today, with a success. Thx for you tutorial :)

[@tothepointfortinet3823]

@@michait3866 Awesome!!