Skip to main content
Bryan461
Bryan461
New Member
November 5, 2021
Question

Multiple SSL VPN connections

  • November 5, 2021
  • 1 reply
  • 2193 views

I've got a FortiGate 60e that is configured with two external interfaces to two completely different ISPs. I have an SSL VPN configured on wan1. I want to create a second SSL VPN on wan2. Is this possible?

 

The end users will only use one of the connections at any given time, but if one of the IPSs experiences an outage, I want them to be able to use the other one as a failover.

 

TIA

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    November 5, 2021

    There are many same questions in the past. It's about the default route(s) for VPN's returning traffic. It doesn't matter SSL, IPSec, or other type of VPN. If access comes in wan2 and the default route is going wan1, it would be dropped by FGT as "asymmetric routing". Do you have a default route to wan2? Either the same metrics (load balance) or lower "priority" static default route. If "yes", it should work.

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.