Fortinet Security Fabric over IPsec VPN

This example shows you how to add FortiTelemetry traffic to an existing IPsec VPN site-to-site tunnel between two FortiGate devices, so that you can add a remote FortiGate to the Security Fabric. This example also shows how to allow the remote FortiGate to access the FortiAnalyzer for logging.

If you have not set up a site-to-site VPN created, see Site-to-site IPsec VPN with two FortiGates.

In this example, an HA cluster called External is the root FortiGate in the Security Fabric and a FortiGate called Branch is the remote FortiGate.

This recipe requires FortiOS 5.6.1 or higher.