Hot!Configuring Fortigate 40F as a Firewall & VPN

Author
Post
Essentials Only Full Version
ahassan99
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2021/02/15 21:23:27
  • Status: offline
2021/02/15 21:28:23 (permalink)
0

Configuring Fortigate 40F as a Firewall & VPN

Hello team,
 
I need help configuring the Fortigate 40F as a VPN and a Firewall.
 
Currently, the ISP modem is connected directly to the ISP router. it is also acting as the DHCP server.
The Fortigate has to be behind the router as per the ISP rules. They will configure a DMZ and forward all the traffic to the fortigate. That's what they said.
 
My worry is, I don't have a public IP. We only get it on the public port on the ISP router and it is Dynamic. How will the fortigate act as the VPN gateway without having an assigned public IP address.

 
appreciate your help
#1

6 Replies Related Threads
    James_G
    Gold Member
    • Total Posts : 263
    • Scores: 13
    • Reward points: 0
    • Joined: 2016/02/28 02:55:47
    • Status: offline
    Re: Configuring Fortigate 40F as a Firewall & VPN 2021/02/16 02:20:10 (permalink)
    0
    You need to look into dynamic dns entry to point to the ip, possibly see if you can run this on the ISP router
     
     
    #2
    ahassan99
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/02/15 21:23:27
    • Status: offline
    Re: Configuring Fortigate 40F as a Firewall & VPN 2021/02/16 02:23:59 (permalink)
    0
    Hi James,
     
    Thanks. I already have a DynDNS subscription and it is now configured on the firewall.
     
    You mean, from the router, the connection through that should be also routed to the firewall, correct?
    #3
    ForMar
    New Member
    • Total Posts : 9
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/01/26 01:35:42
    • Status: offline
    Re: Configuring Fortigate 40F as a Firewall & VPN 2021/02/17 09:53:27 (permalink)
    0
    it should work fine for ssl vpn.
    you could run into issues with ipsec, depends on the Router settings and possibilities, but should work normally as well.
     
    What probably wouldnt work is the autoconfiguration of ssl vpn over ssl web portal.
    #4
    James_G
    Gold Member
    • Total Posts : 263
    • Scores: 13
    • Reward points: 0
    • Joined: 2016/02/28 02:55:47
    • Status: offline
    Re: Configuring Fortigate 40F as a Firewall & VPN 2021/02/18 06:56:15 (permalink)
    0
    The reason to have the dynamic DNS on the router is the firewall will be a little slow to recognise any public IP change, the router should detect it straight away
    #5
    bcdudley1
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/02/18 10:24:28
    • Status: offline
    Re: Configuring Fortigate 40F as a Firewall & VPN 2021/02/18 10:36:17 (permalink)
    0
    If your IP address remains static most of the time, you can simply setup a dns pointer and it should be fine. If it changes frequently, you can look into using a dynamic dns service to connect to it. As long as they are forwarding all the traffic, it should be fine.
    #6
    sw2090
    Expert Member
    • Total Posts : 896
    • Scores: 68
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Configuring Fortigate 40F as a Firewall & VPN 2021/02/23 00:14:39 (permalink)
    0
    you would have to use some ddns in some way to have a unique FQDN as Gateway. Best way here as said is to do that on the router.
    Then you might have to portforward on the router to the FGT to enable VPN Connection attempts to reach the FGT.
    I'm not using SSL VPN here but for IPSec I need to portfoward 500/udp (IPSec) and 4500/udp (NAT-T) on my routers to be able to connect a vpn.
    #7
    Jump to:
    © 2021 APG vNext Commercial Version 5.5