Site-to-Site Fortigate VPN with AWS VPN

[ZedKay]

Hello,

I have a multisite(a,b,c,d) Fortigate setup and plan on turning on Site-to-Site VPN.

That part is fairly straight forward. 

I also plan to connect one of my sites(a) to AWS via a site-to-site VPN.

Will it be possible to have sites b,c,d talk to AWS via the tunnel at site a?

I want to avoid connecting all FortiGate sites to AWS, as AWS charges per VPN connection.

Thanks for any information

[Toshi_Esumi]

You just need to route traffic through one of AWS-connected locations. Draw a proper diagram and design the network accordingly so that you can prepare to set up below:
1) routing (static routes?) at each node the traffic need to path through
2) phone2 network selectors to pass all traffic that need to pass through the VPN
3) policies to allow all traffic that needs to pass through the FGT.

Toshi