Remote access

Remote access lets users connect to the Internet using a dialup connection over traditional POTS or ISDN telephone lines. Virtual private network (VPN) protocols are used to secure these private connections.

The following topics provide instructions on configuring remote access:

• FortiGate as dialup client

• FortiClient as dialup client

• Configure FortiClient SIA for IPsec VPN tunnels

• Add FortiToken multi-factor authentication

• Add LDAP user authentication

• iOS device as dialup client

• IKE Mode Config clients

• L2TP over IPsec

• Tunneled Internet browsing

• Dialup IPsec VPN with certificate authentication

• SAML-based authentication for FortiClient remote access dialup IPsec VPN clients

• Restricting VPN access to rogue/non-compliant devices with Security Fabric

• Enhancing IPsec security using EMS SN verification

• IPsec split DNS

• Dialup IPsec VPN using custom TCP port

• IPsec DNS suffix

• SSL VPN to dial-up VPN migration

• SSL VPN tunnel mode to IPsec VPN migration

• LDAP authentication with IKEv2 using UDP or TCP as transport

• Using single or multiple user groups for user authentication

• Enforcing security posture tag match before dial-up IPsec VPN connection

• IPsec IKEv2 VPN 2FA with EAP and certificate authentication