IPsec and Agentless VPN

This section includes information about IPsec and Agentless related new features:

• New Cloud SDN Orchestration VPN wizard for AWS

• Support matching firewall policies and policy routes based on source IP geography of dial-up IPsec remote users

• Send security posture tags from FortiClient to FortiOS directly as JWT

• TLS 1.3 based VPN over TCP

• Native VPN remote access support in VPN wizard

• Default to IPAM addressing for remote access VPNs in VPN Wizard

• Display interface and tunnel alias in various diagnose and get commands

• Support SM3/SM4 cryptographic algorithms for IKEv1/ IKEv2

• Show only recommended IKE proposals by default

• Signature authentication for VPNs using Post Quantum Cryptography

• VPN with FortiClient Standalone and FortiIdentity Cloud