VPN for iPhone

[Mutallib]

We are using PPTP VPN for accessing to our LAN, but the PPTP isnt supoorted by iphones (anymore). So how can I configure VPN for iPhone users. 

I have shecked the article:  http://docs-legacy.fortinet.com/cb/html/index.html#page/FOS_Cookbook/IPSec/cb_ipsecvpn_iphone.html

but it guides to configure DMZ, but we dont have any DMZ setup. So how can we bypass the DMZ part.

Thanks

[Toshi_Esumi]

I recommend SSL VPN.

http://cookbook.fortinet.com/ssl-vpn-using-forticlient-for-ios/

[ericli_FTNT]

Also you can build IPsec VPN with native VPN setting on your iOS device with FortiOS.

On WebGUI: VPN-IPsec wizard-remote access-iOS native

[Mutallib]

Do I need to have SSL certificate purchased? Or where can I generate theSelf-Signed certificate?

Forgot to mention we have very old firewall, 224B with OS ver 4.0 MR2

[Mutallib]

This is the configuration I have done:

IPSen VPN Config:

config vpn ipsec phase1

edit "iOS_P1"

set type dynamic

set interface "wan1"

set proposal 3des-sha1 aes128-sha1

set keylife 86400

set psksecret ENC XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

next

end

config vpn ipsec phase2

edit "iOS_P2"

set phase1name "iOS_P1"

set proposal 3des-sha1 aes128-sha1

set dhcp-ipsec enable

next end

IP Range:

config system dhcp server

edit 1

set default-gateway 192.168.3.1

set dns-service default

set interface "wan1"

config ip-range

edit 1

set end-ip 192.168.1.240

set start-ip 192.168.1.235

next

end

set netmask 255.255.255.0

set server-type ipsec

set ipsec-lease-hold 0

next

end

Policy:

edit 110

set srcintf "wan1"

set dstintf "port23"

set srcaddr "VPN-iOS" set dstaddr "Internal_Int" set action accept

set schedule "always"

set service "ANY"

set logtraffic enable

next

I am getting the folowing error:

Level                     error Sub Type               ipsec ID                         37125 Virtual Domain       root Message                IPsec phase 2 error Action                    negotiate Error                      Reason no matching gateway for new request

DOnt know whats wrong