BOVPN to Fortigate

Andy_TCT

Hi

I'm trying to setup a BOVPN with a couple of Fortigate Firewalls. Two seperate jobs not related. I've worked through the WatchGuard guide and tried numerous other combinations without success. Does anyone have a known working set of parameters please and has anyone ever got one working?

Thanks

Andy.

Bruce_Briggs

Have you looked at this?

Fortinet FortiGate Policy-Based BOVPN Integration Guide
https://www.watchguard.com/help/docs/help-center/en-US/Content/Integration-Guides/General/Fortinet_BOVPN.html

Andy_TCT

Hi Bruce

Thanks and no I'd not found that, I was working from an older guide by the look. I'll give this one a try and report back.

Andy

kimmo.pohjoisaho

FortiGate default VPN configuration way is Route-Based VPN!
WG calls this BOVPN Virtual Interface configuration.
https://www.watchguard.com/help/docs/help-center/en-US/Content/Integration-Guides/General/Fortinet_BOVPN_virtual_interface.html

You can of course use the Policy-based VPN configuration.
In WG this is the VPN Gateway and VPN Tunnel configuration.
https://www.watchguard.com/help/docs/help-center/en-US/Content/Integration-Guides/General/Fortinet_BOVPN.html

Nowadays the recommended way to build Site-to-Site BOVPN is the Route-based way…. 😊

Charlie_Mak

For BOVPN with virtual interface, it works the best with another WatchGuard.
Have you guys got any experience using virtual interface to form site to site VPN with other vendor(brand) successfully ?

kimmo.pohjoisaho

WG BOVPN Virtual Interface = Route-based with 3.party firewall.

With 3.party firewall you need to make sure "Remote Endpoint Type" is
Cloud VPN or Third-Party Gateway.
You should changes to this, even if the VPN is between two Firebox device...

kimmo.pohjoisaho