Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
James_G
Contributor III

Created on ‎11-07-2019 02:31 AM

IPSEC enabled interface security

Am i correct in thinking that IPSEC site to site VPN configurations were the remote gateway is specified as a static IP, the tunnel will only be able to be brought up if the remote gateway is indeed on that IP?

 

What I am asking is can I depend on the fixed IP of the gateways being a 'factor' in 2 factor security. The other factor obviously is the pre-shared keys.

 

Thanks.

1807
0 Kudos
2 REPLIES 2
James_G
Contributor III

Created on ‎11-07-2019 09:25 AM

Answered my own question - IPSEC main mode uses the fixed remote IP to respond, thus can be a factor

 

:)

1202
0 Kudos
sw2090
SuperUser
SuperUser

Created on ‎11-08-2019 02:52 AM

well the Fortigate does also support entering a FQDN as remote gw of an IPSec Tunnel.

I did that once using some dyndns fqdn since I have no static ip on that site and it works util today.

-- 

"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
1202
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.