restrict IPSec VPN access from certain countries

[ahmadking22]

hello, I need to restrict IPSEC VPN I need to connect only from UAE

I Make this step but problem when I connect VPN (connection fine but no data send for example I cannot ping to any server or pc or login to FortiGate).

[AEK]

Hi Ahmad

This will not work. You have to use local-in-policy.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Restrict-IPsec-VPN-access-to-certain-count...

[ahmadking22]

I Apply this but for testing -I turn on VPN APP to change my location but after that I try Connect also--is it true what I do

ه

[funkylicious]

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Allow-IPsec-VPN-ports-and-protocol-access-... 

[ahmadking22]

in Local Policy

  I try to deny from UAE BUT still working

I do Not know why working

[AEK · Accepted solution]

Try add ESP service as described in the link shared by Funkylicious above.

[ahmadking22]

working fine many thanks for all