hi sir, your tutorial really helped me a lot during my fortinet configuration. Bu now i'm having trouble with the vpn settings. Followed everything you did but i think i am missing the remote gateway. Hope you couls help me with how to identify the correct remote gateway
@@OfficiaI-xrp Fine, thanks for the fast response. That's exactly what I did, I also see the log matches on the firewall. Unfortunately, when I send a ping from the SSL VPN client, no response comes back. (Everything is allowed) I just see that the packet is allowed to go through ICMP. But nothing comes back. Are there any settings that need to be made on the remote Forti-Gate?
On your SSL-VPN Portal profile, have you enabled the split tunneling? if yes then you need to add the other end local subnet on the "Routing Address Override".
Would you be willing to create a video on how to setup VPN using FSSO? I currently have it setup now, but would like to see how you have it configured to make sure I have it setup properly. Also, can you use the free version of foriclient VPN to allow users to change their AD password offsite using the free version? The other thing is how to access resources using DNS rather than IP using free FortiClient VPN. I’m not sure if the free version will allow you to do what I mentioned above or if you have to use the paid version.
I am using SSL VPN and get only data connectivity to remote location from client end and internet from local ISP. How can I get internet also from remote location ISP.
hi there, yes correct, either the WAN public IP address or the DDNS (dynamic domain name system) if configured. You can check my other video on how to configure DDNS, it's very useful if you don't have a fixed public IP address.
I have my setup exactly as yours, but when I connect to the VPN I can RDP into my desktop but I can't ping it. Is there another step to allow ping to work? I do have my service set to ALL and the interface does have ping enabled as well. Thank you!
@@OfficiaI-xrp sir i keep having the same error message about unable to establish the vpn connection. the vpn server may be unreachable. do you have any tips on me where to go or check. thanks a lot
@@poladrianbinas2156 hi there, you must check the remote site or the FortiGate SSL VPN configurations. 1. Make sure the remote site is reachable (if remote site is using dynamic IP address then you can configure the dynamic DNS. 2. Make sure your username and password is configured on the fortigate and also the SSL VPN IP address.
Can't Thank You enough. You didn't miss anything. If someone follows your instructions step-by-step. They will be successful. KUDO's to YOU!
Thank you for this, i configured one incorrectly on a new device and needed to have it up before Monday morning, this video saved my weekend :D
thanks the igorotech, simple and easy to understand. pls keep making these fortigate videos
Hey, John Leguizamo, thanks for the tutorial.
Thank you for this amazing tutorial! Helped me a lot!!!!
Great video. Saved me a lot of timr
Glad it helped. tqvm 👍😉
this guy deserves my sub and like! what and amazing tutorial. appreciate the effort. 👍
Much appreciated!
That's great. Thank you for your useful information
tnx for this ,done subscribing and liking your video. tnx a lot
Great video and tutorial kabayan. God bless you!
Gr8, Super, awesome.. out of the world. I like it a lot
hi sir, your tutorial really helped me a lot during my fortinet configuration. Bu now i'm having trouble with the vpn settings. Followed everything you did but i think i am missing the remote gateway. Hope you couls help me with how to identify the correct remote gateway
Hello,
Can you also say what firewall policies are necessary to access a remote location over two ipsec connected firewalls via SSL-VPN?
hi there, you need to create a policy with a source of SSL VPN virtual interface and the destination would be the IPSec VPN virtual interface.
@@OfficiaI-xrp Fine, thanks for the fast response. That's exactly what I did, I also see the log matches on the firewall. Unfortunately, when I send a ping from the SSL VPN client, no response comes back. (Everything is allowed)
I just see that the packet is allowed to go through ICMP. But nothing comes back.
Are there any settings that need to be made on the remote Forti-Gate?
@@johannessigel may I know the IP address of the SSL VPN? Have you used the default one or have you configured a different subnet?
@@OfficiaI-xrp Yes, I used the default IP rages of the SSL VPN. Does that pose a problem?
On your SSL-VPN Portal profile, have you enabled the split tunneling? if yes then you need to add the other end local subnet on the "Routing Address Override".
Hi sir, can you do a tutorial connecting to internal network using SSL certificate? by the way its a great tuts!..Thank you and more power!
Would you be willing to create a video on how to setup VPN using FSSO? I currently have it setup now, but would like to see how you have it configured to make sure I have it setup properly. Also, can you use the free version of foriclient VPN to allow users to change their AD password offsite using the free version? The other thing is how to access resources using DNS rather than IP using free FortiClient VPN. I’m not sure if the free version will allow you to do what I mentioned above or if you have to use the paid version.
I am using SSL VPN and get only data connectivity to remote location from client end and internet from local ISP. How can I get internet also from remote location ISP.
what public ip address for configure at remote PC, IP on wan interface of Fortigate?
hi there, yes correct, either the WAN public IP address or the DDNS (dynamic domain name system) if configured. You can check my other video on how to configure DDNS, it's very useful if you don't have a fixed public IP address.
@@OfficiaI-xrp thanks you
Greate.Thank you
Welcome!
I have my setup exactly as yours, but when I connect to the VPN I can RDP into my desktop but I can't ping it. Is there another step to allow ping to work? I do have my service set to ALL and the interface does have ping enabled as well.
Thank you!
Maybe your machine is not permitted icmp traffic.
Thank you!
What about Enable split tunneling option in SSL VPN ? Local internet can't be allowed to ssl vpn remote users ?
hi Rohit, Yes, you are correct. Enable split tunneling if you prefer ssl vpn users to use their own connection for internet access.
But it’s not working
auto connect and always up option not showing
hi, you can enable auto connect on the fortigate but you cannot use it on the free forticlient.
thanks champ
Thank you
Super
Thanks
hi @d'igotoTech im new to this but can you explain where to get or how will I know what is my remote gateway ? like you mention in this video?
hi, remote gateway is the public IP address of the remote site or the network you want to remote in to.
@@OfficiaI-xrp thank you soo much
@@OfficiaI-xrp sir i keep having the same error message about unable to establish the vpn connection. the vpn server may be unreachable. do you have any tips on me where to go or check. thanks a lot
@@poladrianbinas2156 hi there, you must check the remote site or the FortiGate SSL VPN configurations.
1. Make sure the remote site is reachable (if remote site is using dynamic IP address then you can configure the dynamic DNS.
2. Make sure your username and password is configured on the fortigate and also the SSL VPN IP address.
@@OfficiaI-xrp im really grateful toyour help, thanks.