Fortimanager - VPN at different sites

[Hexcode]

Hello,

I'm currently setting up a VPN over multiple branches. What is the intended way of connecting the FortiManager to the Sites?

Is it secure to allow FMG-Access on the WAN-Side so that Fortimanager can connect to the different branches or should I go by first setting up a VPN for FortiManager and then use this VPN to configure the device itself?

Kind regards

[VinayHM]

Hi @Hexcode 

We can configure the IPsec tunnel individually or we configure IPsec config on Fortimanger and we push the configuration to the respective device.

Regards,