Umbrella SIG VPN for HTTPS Inspection and Fortigate

[amadoriale]

Hello,

I see on this doc

https://docs.umbrella.com/umbrella-user-guide/docs/tunnels

and also this one

https://docs.umbrella.com/umbrella-user-guide/docs/supported-ipsec-parameters

that Umbrella has only been tested for S2C VPN on CISCO hardware, but it's probably compatible with anything that can support an IKEv2+PSK configuration. I am also aware that maximum is 2 tunnels per site for a maximum throughput of 500mbps.

Now, has anyone ever implemented this on Fortigate devices? I believe it should be pretty straightforward and easy to do, but I have tested it on a Ubiquiti USG and it's not working atm, so we have a customer with a Fortigate perimeter defence and we wouldn't want to fall short just cause he has a different technology as perimeter defense. After all, Umbrella should be deployable anywhere, it's the whole concept of the SWGs.

[Ruben Cocheno]

@amadoriale 

I've tried and didn't have any problem, but never tried to reach that bandwidth per tunnel. Something to test at some point.

[Kenzo De Ruysscher]

Hi Ruben

How did you set up the tunnel on the Fortigate exactly?

I'm also trying to set this up but can't figure out the tunnel config on the Fortigate.

Thanks!