FortiGate Firewall VPN / Geo IP
fortigate vpn country block - Restrict VPN access to certain countries
Geo-Lock VPN traffic - restrict SSL tunnel - VPN connections to limited countries
Block external ip's from reaching VPN ports - SSL VPN and Geo IP addresses



-------------------------------------------------------
1 VPN
-------------------------------------------------------

Addresses

" , "



Go to [Policy & Objects].[Objects].[Addresses] in the GUI
Create a new address with the type Geography and select the required Country.
Save the Address

:
FortiGate Firewall How To block specific Country


-------------------------------------------------------
2 Restrict Access SSL-VPN Settings
-------------------------------------------------------



SSL-VPN Settings Restrict Access Limit access to specific hosts
Hosts

Then proceed to [VPN].[SSL].[Settings] in the GUI

Under connection settings select the radio button {Limit access to specific hosts} and select the address you created above. You can select multiple addresses in this list. Alternatively you can create an address group and reference that group in the SSL VPN settings.

:

vpn

:
https://forum.fortinet.com/tm.aspx?m=136899
https://kb.fortinet.com/kb/documentL...rnalID=FD45208
https://forum.fortinet.com/tm.aspx?m=148776
https://forum.fortinet.com/tm.aspx?m=169953