Seeking Advice on Fortinet VPN Configuration

[jackisas]

I'm currently setting up a Fortinet VPN for our office network. Does anyone have recommendations or best practices to ensure a secure and efficient configuration? Your insights would be greatly appreciated. Thank you

https://community.fortinet.com/t5/forums/

[esalija]

Hi @jackisas 

Please follow the doc for the best practice for Firmware 7.4.1 - https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/357080/best-practices

Best regards,

- Erlin

If you have found a solution, please like and accept it to make it easily accessible to others.

[ndumaj]

Hello jackisas,

Please review the guide:
https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/869159/ssl-vpn-best-practice...
https://docs.fortinet.com/document/fortigate/6.2.9/cookbook/371626/ssl-vpn
https://docs.fortinet.com/document/fortigate/6.0.0/handbook/282743/ssl-vpn
https://docs.fortinet.com/document/fortigate/7.4.0/best-practices/566002/ssl-vpn
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-specific-SSL-VPN-address-...

I would also recommend to use a 2FA(2 Factor authentication) for SSLVPN.
FGT box or VM comes with 2 free Fortitokens that you can use it.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-assign-FortiToken-Mobile-to-users-o...

BR

[KumarV]

Hello @jackisas 

Best practices would be to Use Strong Authentication: Implement multi-factor authentication (MFA) to enhance security. This ensures that even if a password is compromised, an additional factor is required for access.Regularly Update FortiClient: Keep FortiClient up to date with the latest software and security patches to protect against vulnerabilities.Secure Configuration: Configure FortiClient with strong encryption and security settings. Use protocols like SSL or IPSec, and disable less secure options.

Best Regards

[pmudgal]

Hi jackisas,

Thank you for posting, as this is going to be the fresh config you can refer the admin guide based on the firmware version you are running on FGT.

Also you need to make sure you check the compatibility matrix between the FCT and FGT firmware versions.

Refer the below admin guide, you can change the FirtiOS at the top accordingly.
https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/371626/ssl-vpn

To check the interoperability for 7.4.0 OS, you can changer as per your deployment.
https://docs.fortinet.com/document/fortigate/7.4.0/fortios-release-notes/936594

Best regards,
Piyush Mudgal