This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.
It would be cleanest to remove the IPsec config if you plan not to use it. A local-in policy is the way to narrow down the source by address, range or country if you need the IPsec VPN.
As best practice, move the SSLVPN port to a higher number, e.g. 30443. Would be more difficult to hit without extensive port scanning. Only drawback: some hotel could be overprotective and not allow high ports/non-standard ports.
It would be cleanest to remove the IPsec config if you plan not to use it. A local-in policy is the way to narrow down the source by address, range or country if you need the IPsec VPN.
As best practice, move the SSLVPN port to a higher number, e.g. 30443. Would be more difficult to hit without extensive port scanning. Only drawback: some hotel could be overprotective and not allow high ports/non-standard ports.
