IPsec tunnel for remote access (client access)

[miciti]

Hi everyone,

I want to set up ipsec with FortiClient as dialup client (as mentioned here: https://docs.fortinet.com/document/fortigate/7.4.8/administration-guide/785501/forticlient-as-dialup...). 

Since ipsec seems to have way more options than ssl vpn - if I go trough the IPsec Wizard for remote access. Are these default settings ok (safe) to use?

[AEK]

Hi Miciti

Yes they should be safe, because the latest FortiOS versions don't use the obsolete encryption/authentication algorithms.

[tbarua · Accepted solution]

Hi Miciti, 

Yes, if the default settings work for you, you can leave them as they are.

Additionally,  you can check these documents as well as a reference: 

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-IKEv2-for-a-dial-up-IPsec-tunn...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IKEv2-Dialup-IPsec-tunnel-with-RADIUS-and/...