Hello all,
I'm using the Fortigate 200F with firmware version 7.2.5.
I want to enable the Cisco Anyconnect remote access VPN using my current fortigate firewall.
I'm asking if there is any tutorials or KBs to help me with the steps for this project.
Many thanks,
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Are we talking SSL-VPN or IPsec? In either case, the answer is most likely "no".
SSL-VPN: This has no standard/RFC, so as a rule of thumb you should always assume no compatibility between vendors, unless explicitly confirmed by either side. (And as far as I know, this is the case here too)
IPsec: IPsec is mostly standardized, and there is even a "Dialup - Cisco IPsec Client" wizard template in FortiOS GUI. However, the last time I've heard about this, this teplate supposedly only works with some old/outdated Anyconnect versions, and new/current Anyconnect clients are reportedly incompatible with general third-party solutions due to some vendor-specific proprietary attributes used by Anyconnect and ASA.
Why? Why not use FortiClient? FortiClient has a free option (without TAC support). Cisco Secure Client requires Essentials or Advantage licensing.
I'm using the ASA-5515 in my old system, and as upgrade I'm switching to the Fortigate 200F. Regarding the budged, ZTNA will be implemented in 2024, so that's why I will use the anyconnect solution for the moment.
ZTNA? Why not use FortiClient for now? This is not going to be possible. Your version of AnyConnect for the 5515 is probably EOL by now anyways.
Are we talking SSL-VPN or IPsec? In either case, the answer is most likely "no".
SSL-VPN: This has no standard/RFC, so as a rule of thumb you should always assume no compatibility between vendors, unless explicitly confirmed by either side. (And as far as I know, this is the case here too)
IPsec: IPsec is mostly standardized, and there is even a "Dialup - Cisco IPsec Client" wizard template in FortiOS GUI. However, the last time I've heard about this, this teplate supposedly only works with some old/outdated Anyconnect versions, and new/current Anyconnect clients are reportedly incompatible with general third-party solutions due to some vendor-specific proprietary attributes used by Anyconnect and ASA.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1705 | |
1093 | |
752 | |
446 | |
230 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.