Skip to main content
nonpe
Explorer
December 22, 2025
Solved

SSTP VPN support and Layer 2 traffic control on FortiGate / FortiSwitch

  • December 22, 2025
  • 2 replies
  • 353 views

Hello,

In one of the company’s offices, we are planning to completely replace the hardware equipment, which includes the following:
1. FortiGate-120G Hardware
2. FortiSwitch-1048E
4. FortiSwitch-148F-FPOE
5. FortiAP-234F

What concerns me is that, for some of the offices, the only available option for a SSTP VPN tunnel is, due to the fact that the providers block our other VPN solutions.

From forums, documentation, and various sources, it is stated everywhere that SSTP cannot be used.

Is it true that it is not possible to use SSTP at all?
The other question is whether it is possible to control Layer 2 traffic between computers.
By this I mean: if one computer attempts to attack another computer, and both are connected to the same switch, is there an integrated tool on the switch that would allow me to detect and block such an attack?

Thank you in advance for your time.

Best answer by earingfabulous

FortiGate doesn’t natively support SSTP, so you’d need a Windows Server or another SSTP-capable device if that’s required.

For Layer 2, FortiSwitch supports VLANs, ACLs, 802.1X, and ARP/IP-MAC binding to isolate devices, but there’s no automatic attack detection at Layer 2 — segmentation and monitoring are key.
https://docs.fortinet.com/document/fortiswitch/7.4.4/fortilink-guide/756049/fortiswitch-security-policies steal a brainrot

2 replies

earingfabulous
New Member
December 22, 2025

FortiGate doesn’t natively support SSTP, so you’d need a Windows Server or another SSTP-capable device if that’s required.

For Layer 2, FortiSwitch supports VLANs, ACLs, 802.1X, and ARP/IP-MAC binding to isolate devices, but there’s no automatic attack detection at Layer 2 — segmentation and monitoring are key.
https://docs.fortinet.com/document/fortiswitch/7.4.4/fortilink-guide/756049/fortiswitch-security-policies steal a brainrot

nonpe
nonpeAuthor
Explorer
December 23, 2025

Thank you for your prompt and accurate reply

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.