REPLACE FORTICLIENT VPN SOFTWARE WITH A FORTINET ROUTER

[didacmlna]

Hi,

Is there a possible replacement of the FortiClient VPN with a Fortinet Router?

Now we are connecting to a VPN server and every computer in the office is connecting using FortiClient VPN with user and password every time.

Is it possible to put a Fortinet Router FG-30 or 40, and this one connects to the server and we can stop using the software client?

Thank you!

[seshuganesh]

Hi Team, 

You will have many users connectin from different different locations. You need to have many fortigates in all machine networks.

Thats the main reason to make things simple, we should use forti client, we just need to install software in machine.

SO that tunnel will be established 

[Debbie_FTNT · Accepted solution]

Hey didacmlna,

- if you have scenarios where users need to connect from different locations (home, when travelling, etc), FortiClient is probably a better choice as that allows connection from anywhere, and users would not have to take a FortiGate with them.

- if your scenario is that your users are in Office A (all of them), and need a VPN to connect to Office B and access resources, then yes, you could use a FortiGate instead and set up a site-to-site IPSec VPN tunnel for example; the users in Office A would be routed via the tunnel to Office B  and not need to set up a VPN.

[didacmlna]

Hi Debbie,

Yes the scenario is as follows:

We have a Headquarters office centralized in Barcelona, and there's 550 franchises around Spain connecting to the VPN server using FortiClient VPN in every computer.

Problems of that? You need a user and password for every computer, you can't have the same user on multiple computers so we have problems with that. You need to install on every computer, it takes some time to connect...

So we are searching a way to  connect the whole Office to that VPN server instead of computer by computer...

So the scenario is:

HQ VPN server where every franchise connects using a username and password. And then our office, with 10+ computers connecting to that server.

So we would like to connect in our network, a VPN gateway that connects directly to the server so we can stop using the annoying software.

So do you think a FORTINET ROUTER FG30 or something like that would do the work?

Thanks!

[Debbie_FTNT]

Hey didacmIna,

yes, something like a FortiGate/FortiWifi 40F or 60F might be suitable to handle the traffic for ten people.

I would suggest that you have a peek at the datasheet (https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/Fortinet_Product_Matrix.pdf) to get an idea of what models might be of interest, and then reach out to a partner or reseller for a quote :).

We also have a guide to suggest products that might suit you:
https://www.fortinet.com/solutions/small-business/product-selector

In principle, any FortiGate would be able to establish and maintain the VPN tunnel (provided the VPN server can do the same).

Config wise, you would be looking at something like this:

https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/281288/site-to-site-ipsec-vpn-with-two-f...

[didacmlna]

Hi Debbie, do you think a Fortigate 40/50/60 E or D would do the work too? 

And other question, I saw the config manual, yes that's what we have. But HQ is not going to give us a pre-shared key. We have username and password. Is there any way to connect to HQ using User and Password as we are using now with the FortiClient VPN software?

Thank you!