Bypass the firewall of China

[niteshb]

Hi,

In order to connect to some of the servers and internal websites deployed in a public cloud, I would like to invite my colleagues from China to connect to the services and servers. 

But somehow, they are not able to bypass the firewall of China. 

I am interested to know if Fortinet has any product (e.g. VPN) which can help my colleagues from China to bypass the firewall. 

Thanks. 

[kgeorge]

Hello Nitesh,

FortiGate has inbuild VPN feature both SSL VPN and IPsec Remote VPN.

You could configure either of these and the clients from anywhere can connect to that VPN using FortiClient VPN application or any other VPN application to access Internal Resources.

For SSL VPN - https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/954097/ssl-vpn-tunnel-mode

For IPSec Remote - https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/785501/forticlient-as-dialup...

In case of Virtual IP with Forwarding, you can refer this - https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/155333/virtual-ips-with-port...

Have a nice day!

Regards,

Klint George

[ede_pfau]

Do not rejoice too early, as IPsec VPN traffic protocols are not so difficult to detect, and to block.

As a hint, since FortiOS v7.0, you can change the default VPN ports (and 4500) to _one_ custom port. The other, receiving site just has to know and be able to configure that too.

OTOH, SSL VPN can be set up to use the standard HTTPS port 443 which is much more difficult to block as that would block a lot of legitimate traffic. Since FortiOS v7.0, you can configure a FGT to act as an SSL VPN client (just like a FortiClient), so you can effectively create an SSL VPN site-to-site.

HTH