Select Type as 'Subnet', enter a Name (e.g. The example below assumes that an IPsec VPN is already set up and accessible via a static IP Address on Interface WAN1 and that access is only required from VPN clients originating from IP addresses from a certain country.ġ) Create an Address Object for the WAN IP Address:įrom the Fortigate’s GUI Interface select: Policy & Object, Addresses, select 'Create New' then Address. These polices exist to permit access to various services and to support the inner working of the FortiGate and include access to ports used by IPSec VPN.īy configuring a Local-In policy in conjunction with a Geography address object it is possible to modify the default behavior and restrict access to IPsec VPN to IP Addresses originating from certain countries. Indeed, by default, dialup IPSec VPN’s are accessible to all public IP addresses on the InternetįortiGate Firewalls have a built in Security Profiles called 'Local-In' policies.

This article describes how to restrict VPN access to certain countries.

Fortinet vpn client nordvpn