Skip to main content
Dan_Eng52
Dan_Eng52
Explorer III
November 22, 2024
Question

FortiSASE Portal - VPNs available to users

  • November 22, 2024
  • 3 replies
  • 3266 views

Hi all, 

 

I hope you're well. 

 

I am testing FortiSASE and have setup and working as I would like however, I would like to run some alternative IPsec VPNs as well as the SIA into FortiSASE. Within the SASE portal I have added the IPsec VPN into the "VPNs available to users" section and this Endpoint Profile is pushed out to my device. 

 

Edit VPN.jpg

 

The problem is that within the portal I cannot find any section whereby I can specify my VPN settings and even though this VPN gets pushed to my device I am unable to adjust the VPN settings within FortiClient as they're greyed out and therefore I can't get the VPN working. 

 

VPN Settings.jpg

 

Is there anyone that has configured other VPNs in the Endpoint Profile that can help me locate these settings or tell me how I can push the IPsec VPN settings I require to the device from the profile? 

Thanks, 

Dan. 

3 replies

Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
November 25, 2024

Hello Dan_Eng52, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Jean-Philippe - Fortinet Community Team
    Dan_Eng52
    Dan_Eng52Author
    Explorer III
    November 26, 2024

    Hi Jean-Philippe_P, 

     

    That would be great, thank you! 

    Cheers, 

    Dan. 

      Jean-Philippe_P
      Staff & Editor
      Jean-Philippe_P
      Staff & Editor
      November 28, 2024

      Hello,

       

      We are still looking for an answer to your question.

       

      We will come back to you ASAP.

       

      Thanks,

      Jean-Philippe - Fortinet Community Team
      sjoshi
      Staff
      sjoshi
      Staff
      November 28, 2024

      Hi Dan_Eng52,

       

      Do you want to setup another VPN profile in the endpoint or want to edit this specific profile.

      https://docs.fortinet.com/document/fortisase/latest/administration-guide/209451/profiles

       

      You can only change those parameters what is available from the SASE and if anything more you want to change that needs to be done from the backend EMS for which you can raise a Fortinet ticket and request the support to check on the possibility.

      Thanks, Salon
        Dan_Eng52
        Dan_Eng52Author
        Explorer III
        November 28, 2024

        Hi Salon Raj Joshi, 

         

        Thanks for your response. 

         

        I want to setup another VPN connection for the user to be able to use and connect to within the endpoint profile. I can do this (As shown in my screenshots in original post) however, I am unable to change the VPN Setting, Phase 1 and Phase 2 so although it gets pushed to the device I can't connect as the proposals are incorrect. 

         

        Is there a way that I can push the correct proposals out to the device for the VPN that I have configured in the endpoint profile? 

         

        Regards, 

        Dan. 

        sjoshi
        Staff
        sjoshi
        Staff
        November 28, 2024

        Hi Dan,

         

        Can you confirm the 2nd VPN profile which you are trying to connect is being connected to a different On prem FGT and not the SASE VPN correct?

        Thanks, Salon
          Terms & ConditionsAccessibility statement