Remote access

Remote access allows users to connect to the office network over VPN for remote work from home scenarios. This could be for accessing servers and services in the office network, or routing the entire Internet access over the VPN gateway. The latter scenario, often called Secure Internet Access (SIA), allows remote workers to secure the Internet traffic through the corporate firewall which will perform standard NGFW inspection on the traffic.

The following topics provide instructions on configuring remote access:

• FortiGate as dialup client

• FortiClient as dialup client

• Add FortiToken multi-factor authentication

• Add LDAP user authentication

• Configure FortiClient SIA for IPsec VPN tunnels

• LDAP authentication with TCP as transport

• VPN 2FA with EAP and certificate authentication

• Using single or multiple user groups for user authentication

• Native VPN as dialup client - Windows New

• Native VPN as dialup client - iOS

• Windows IKEv2 native VPN with user certificate

• Dialup VPN with certificate authentication

• SAML-based authentication for FortiClient remote access VPNs

• Enhancing IPsec security using EMS SN verification

• IKE Mode Config clients

• IPsec split DNS

• Defining gateway IP addresses in IPsec with mode-config and DHCP

• IPsec DNS suffix

• Dialup IPsec VPN using custom TCP port

• Matching IPsec tunnel gateway based on address parameters

• Enforcing security posture verification before dial-up VPN connection