VPN between Fortigate (static IP) & Palo Alto (dynamic IP)

[tim5700]

I would think the Fortigate needs to act like a VPN server and the Palo as a dialup user.  Just unsure how to go about it.

[syordanov]

Dear tim5700,

For this scenario where Fortigate has static IP address and Palo Alto has dynamic IP address, you can check the KB bellow :

Dialup VPN Configuration Between Two FortiGates  

In your case the Fortigate will be configured as Dialup Server and Palo Alto will act as a dialup client.

Best regards,

Fortinet

[Yurisk]

Never configured PA as a VPN client, so can't comment on that, but have you considered using some DDNS provider on the Palo-Alto side? Then you could set up regular VPN site-to-site on Fortigate using FQDN instead of the IP for remote peer (PA).