Assessing my Web Application using Firewall

Using VPN is usually the best way here since there’s no static IP and the server setup can’t be changed. You can set up SSL VPN on the fortigate so remote users can securely connect to the local network and access the ERP through its local link. Port forwarding with Dynamic DNS could work too but that would expose the ERP to the internet, so vpn is definitely the safer option. And if you want to keep you files organized, you can use cx file manager app.

Hi Saurabh

I don't think is a good idea to publish your ERP on the internet. If the ERP is intended to be accessed by the company staff then the right thing to do is to make it accessible through VPN, or ZTNA.

If you go for VPN, since SSL VPN is now discarded by Fortinet, then you will need to configure dialup IPsec.

Regarding the dynamic public IP, you can use dynamic DNS, either for ZTNA or for dialup IPSec.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-DDNS-for-an-IPsec-dial-up-connection-from/ta-p/335586