Skip to main content
MBR
New Member
August 31, 2017
Question

IOS per-app VPN compatibility with FortiGate VPN

  • August 31, 2017
  • 3 replies
  • 14903 views

Hi,

 

Does anyone know if Fortigate VPNs can be used for the IOS per-app VPN functionality deployed using Airwatch, Intune, XenMobile etc?

 

For example intune doesn't mention Fortigate as supported connection type:

https://docs.microsoft.com/en-us/intune/vpn-settings-ios

 

Thanks.

 

    3 replies

    bommi
    New Member
    August 31, 2017

    Hi,

     

    this is not possible with fortinets ssl-vpn.

     

    Regards

    bommi

    ispcolohost
    New Member
    September 25, 2017

    Apple's Configurator 2 guide makes it sound like additional per-app VPN types can be defined as a custom config?  

     

    For other SSL VPN solutions, contact your vendor and ask if they have an app in the App Store. If they do, choose Custom SSL from the Connection Type pop-up menu, then enter the configuration information provided by the vendor. Make sure the Identifier field matches the identifier specified by your vendor’s VPN app and is in reverse DNS format (for example, com.example.myvpn). Your users must install both the vendor’s app and the configuration profile to connect to your network.

     

    Will this definitely not work with FortiClient?  The 5.4.1 ios guide mentions FortiClient having an identifier of com.fortinet.forticlient and support for split tunnel ssl-based vpn.  I was hoping to use this same functionality so I can get one ios app to an internal server but not touch anything else.

    bommi
    New Member
    September 25, 2017

    Hi,

     

    you have two options:

     

    1. Default route all traffic through the forticlient vpn tunnel.

    2. Split tunnel specific routes through the forticlient vpn tunnel.

     

    Routing specific per-App traffic through the tunnel is not supported.

     

    You could ask your local SE to submit an Feature Request or search for an existing one.

     

    Best Regards

    bommi

    nchayrigues
    New Member
    January 31, 2020

    hi, i have the same problem .....

    i think we use Apple configurator ..

    kboutelle
    New Member
    April 8, 2020

    I have this question specifically about Intune.