FortiGate IPsec VPN for users

Forum|Forum|1 year ago
April 20, 2025
2 replies
707 views

Hi everyone.

I am just trying to find out what everyone is doing regarding moving from SSL VPN to IPSEC VPN, what are you putting in place that is potentially free as safeguards and best practice methods.

Geo - location - restrict where users can SSLVPN from.
SAML - with 2FA auth.

Others?

Thanks in advance.

FortiGate

AEK

SuperUser

Hi Domnik

Regarding IPsec GeoIP restriction, here's how you can do:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Restrict-IPSec-VPN-access-to-certain-countries/ta-p/192328

Hope it helps.

AEK

kaman

Staff

Hi Domnik,

You can follow the documents below regarding SAML-based authentication for FortiClient remote access dialup IPsec VPN clients:

https://docs.fortinet.com/document/fortigate/7.2.0/new-features/951346/saml-based-authentication-for-forticlient-remote-access-dialup-ipsec-vpn-clients

https://docs.fortinet.com/document/forticlient/7.2.0/new-features/712604/ipsec-vpn-saml-based-authentication-7-2-4

Regards,
Aman

Sign up

Login with SSO

Login to the community

Login with SSO