ipsec vpn issue in Egypt

[ibrahimarafa1234]

I have a 2 fortigates , 2 different isp and i made vpn between them but the link is down because one of isp is closes the port of vpn , so i need badly an answer that helps me ?

[emnoc]

Okay you have a few items you can explore

In fortios version 7.0 has a means for changing  ike-port , so if the ISP is block 500/4500 you can maybe explore and look for a different port #.

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/33578/configurable-ike-port

OR

You can see if GRE is allowed between the 2 locations.

Another solution that I used in the central asian was cisco ios  and some cheap 800/900s and use do a L2TP transport between the sites for a L2TPv3 layer2 overlay and then run the fortios interfaces in that topology.

YMMV

Ken Felix