VPN termination: fortigate or router

[cynthia]

Hi please I need your help ,

If we have a VPN between 2 branch, where is it recommended to terminate this vpn? on a Fortigate

 or a router?

What are the advantages of VPN on a fortigate and what is the added value when terminating on a firewall and not on a router?

[ede_pfau]

Simply put, and my personal opinion only, terminating a VPN on the FGT is easier to set up, manage and use.

See, routers may change, depending on the access technology; basically, we need them for interfacing (to fiber, WiFi, cable,...). They are not specifically made for security, VPN, application control etc.

With the tunnel definition on the FGT you get a broad support for IPsec standards, easy setup by using address objects for phase2 and the routing, monitoring, (some) logging. As often the FGT is central to a LAN you only need to learn one OS or Web GUI.