Explorer II

Solved

restrict IPSec VPN access from certain countries

Forum|Forum|1 year ago
September 13, 2025
6 replies
946 views

hello, I need to restrict IPSEC VPN I need to connect only from UAE

I Make this step but problem when I connect VPN (connection fine but no data send for example I cannot ping to any server or pc or login to FortiGate).

Screenshot 2025-09-13 163617.png Screenshot 2025-09-13 163330.png

FortiGate

Best answer by AEK

Try add ESP service as described in the link shared by Funkylicious above.

AEK

SuperUser

Hi Ahmad

This will not work. You have to use local-in-policy.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Restrict-IPsec-VPN-access-to-certain-countries/ta-p/192328

AEK

ahmadking22Author

Explorer II

Screenshot 2025-09-13 192153.png

I Apply this but for testing -I turn on VPN APP to change my location but after that I try Connect also--is it true what I do

ه

funkylicious

SuperUser

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Allow-IPsec-VPN-ports-and-protocol-access-to/ta-p/251878

"jack of all trades, master of none"

ahmadking22Author

Explorer II

in Local Policy

I try to deny from UAE BUT still working

I do Not know why working

AEKAnswer

SuperUser

Try add ESP service as described in the link shared by Funkylicious above.

AEK

ahmadking22Author

Explorer II

working fine many thanks for all

Sign up

Login with SSO

Login to the community

Login with SSO