Skip to main content
youcef_guessad
youcef_guessad
New Member
February 22, 2018
Question

Policy based ip sec VPN

  • February 22, 2018
  • 1 reply
  • 7325 views

Hello,

 

I have fortios 5.6.2 and I would like to configure tunnel VPN with policy based ipsec but, I don't have a chose between firewall and vpn policy.

 

find attached my capture.

 

Thank you for your help.

    1 reply

    null
    null
    New Member
    March 14, 2018

    I've got the same problem. FW 5.6.3, NGFW, central SNAT. I want to use policy based ipsec because i need a lot of nat, so it would be easier to use nat in ipsec policy not in central snat table. Is policy based ipsec obsolete?

    Pete_Benac
    Pete_Benac
    New Member
    March 16, 2018

    To do policy based VPN the tunnel cannot be created as an interface tunnel.    Considering the tunnel is not showing up here I am assuming when you created Phase 1 of the tunnel you didn't unselect the Interface Selection.

     

     

     

     

    rwpatterson
    rwpatterson
    New Member
    March 16, 2018

    You can still NAT an interface based IPSec tunnel (in both directions if needed...), you just need to create an IP pool and use that in the policy handling the IPSec tunnel. This is far easier (to me) than d*cking with the old policy based process.

     

    My two cents

    Terms & ConditionsAccessibility statement