mapping another site to fortigate public IP

[dillee1]

Hello,

I am migrating from real metal to cloud service. The cloud virtual firewall are so limiting that existing ipsecs vpn with 3rd parties cannot be possibly implement. So we are thinking of mapping the cloud subnet to a real site behind a fortigate 200a, and have the the 3rd party VPNs terminates there. Whats the best solution for this?

Thank you in advance.

[Toshi_Esumi]

Based on what you describe, you just need to route the 3rd party's subnet coming over the external vpn toward the cloud subnet over the internal vpn and vice versa at your FG200A (By the way I didn't know 200A existed. We used to use 400A long time ago).