New FG90G Cluster - No SSL VPN and FortiTokens, so what is the best way?

Hello,

we are preparing the FG90G models to substitute the FG81E cluster. Right now we have 7.4.7 and I was able to enable SSL VPN por CLI. Since we are using 50 FortiTokens (no Cloud Tokens) for the SSL VPN right now I guess we have to transfer them via the Fortinet Support to the new models.

> I guess we cant copy the user with the Tokens to the new model and I am preparing to configure them via LDAP as new users and later assign them the FortiTokens I will get via transfer. I dont think there is a better way, no?

> There will be no more SSL VPN for this model since we tested with 7.4.8 and I could not enable SSL VPN. Since we have to start over with all users because of the Token we will have to change to IPSec and start over with PSK. I dont think there is a better way, no?

> One thing I still have not figured out is the problem with the SSL connection from users behind customer firewalls. So far we have not localized an actual user with this problem but it could be a problem in the future. What can we do with remote access when users are behind systems where they only allow https traffic - any suggestions?

Thanks!