FortiGate 60 Remote VPN Setup

@kashifnadeem86

As an experienced Azure Solutions Architect Expert and DevOps Engineer, I have an extensive skill set that directly aligns with your FortiGate 60 VPN Setup project. Over my 10-year professional journey, I have designed, deployed, and automated secure infrastructures for scaling companies like yours. My expertise in networking goes beyond creating user groups and user profiles; I can manage secure access to resources across multiple locations. Dressing the needs of each unique staff group, I will use my knowledge of Azure Front Door, Application Gateway, Load Balancer, and other essential elements to ensure that Group A, B, and C can only access the resources assigned to them in Location A, B, and C respectively. Moreover, I understand how important it is for you to maintain the system once deployed. I will document all firewall and routing changes made during the setup so that you can confidently carry forward with any modifications independently if needed. My aim isto build a solution that is not only functional but also sustainable in the long run. Working on the current FortiOS version through a remote session doesn't pose any challenge, as it' s part o

@AhmedMFakkar

Hello Dear, I am Fortigate and VPN expert and I can assist you with the required 3 different portals where each group can access only specific resources. I have a Cisco CCNP certificate and have great experience in various network technologies such as VLAN, STP, OSPF, EIGRP, BGP, MPLS, OpenVPN, IPsec, L2TP, PPTP, SSL, etc. Also, I have great hands-on experience in, - Cisco Routers ASR 9k&1k, ISR 4K, 2900, 2800, 878, 888, Switches Nexus 9K, Cat 6500, 3850, 2900 and ASA 5505, 5506x, 5508. - Juniper Routers (M7, M10, MX 480, MX 960) and SRX (300, 500). - Palo Alto 220, 550, 850 and 3200 and Fortigate 40F, 60F, 100E, 200E and 800E Firewalls. - Huawei routers NE-40, NE5000E and Switches Quidway S2700 and S5300. - HP Switches procurve 3500 and procurve 5900. - Mikrotik CCR1036, CCR1009, CCR1700, CCR2204 and RB2011. We can discuss it further, let me know if you are interested. Regards, Ahmed Fakkar

@farooqtahir2013

As an experienced Network and System Engineer, I have an extensive background in working with a myriad of network infrastructures, including firewalls, such as FortiGate. My decade-long career has seen me design, plan, and implement robust network solutions for diverse organizations. With my expertise with Microsoft HyperV and Fortinet products in particular, I can assure you the best approach in configuring your FortiGate 60 for Remote Access VPN as per your specified requirements.

@mnomanrajput

As a seasoned data center expert and a Network Administration, I possess an unmatched skill set suitable for your FortiGate 60 remote VPN setup project. My experience working on several firewalls, including Fortinet, Cisco ASA, Palo Alto, Sophos, Sonicwall and more is the robust defense you need to ensure separate user groups maintain their respective access levels and don't bleed across locations. In addition to configuring your FortiGate appliance, creating address objects, user groups, and policies unique to each group for their specified resources in different locations is what I live for! I specialize in designing and implementing medium and large scale enterprise networks with a focus on firewall security and VPN configuration. I am confident in my ability to provide you with clear instructions which you can implement easily even after the project completion. Moreover, I hold esteemed certifications such as Cisco CCNA & CCNP (Routing & Switching), CCNP Security , CCNP Data Center alongside Microsoft MCSA 2012 that validate my ability to handle complex network projects such as this with sheer excellence. In conclusion, my rich skillset complimented by 10+ years of experience uniquely positions me to be your best choice for the successful execution of this project. Let's connect and get started on optimizing your remote access VPNs while ensuring data segregation for each group.

@linuxpro2008

Worked with all kind of servers and all panels since 2007 And currently working as linux system administrator If you need to start as soon as possible contact me And tell me more details about what you want to Tell the time and cost accurately, please contact me now, looking forward to work with you Best regards

@Arismans22

Hi, i've done deploy multi-profile SSL VPN with split tunneling on fortiGate in production not just in virtual lab. Previously set this up for 70+ users with AD-based user groups on a university network, so user groups, address objects, policies, and isolated routing per location is routine work for me. I'll deliver ready-to-distribute FortiClient profiles and full documentation of every change made. Message me if you'd like to discuss the details before we start. Best, Arisman

@petedao

Hello, I've been working with Fortigate devices for many years. I assume that Site-to-Site VPNs have been setup properly. Then we can use SSL-VPN or IPSec-VPN, all will work fine with your case, that will depend on the FortiOS version (newer FortiOS has removed SSL-VPN). Just message me anytime, and we can discuss further about this. Things will be resolved quickly with ease. Looking forward to working with you! Thank you! Pete,

@sufyand1

Hello there, I can securely configure your FortiGate 60 to support Remote Access VPN for multiple user groups with strict resource isolation. Each group (A, B, C) will have dedicated policies, address objects, and split-tunnel settings to ensure no cross-access between locations. I’ll implement username/password authentication, create structured user groups, and optimize firewall rules for performance and security. Additionally, I will prepare ready-to-use FortiClient VPN profiles for seamless user onboarding. All configurations will be documented clearly, including routing and policy changes for easy future management. Work will be completed remotely on your current FortiOS version with full validation.

@antonbarba

Hello I'm a certified specialist (NSE4/NSE5) and can set up a VPN (IPsec/SSL VPN) in 1 hour. For a more detailed discussion, please contact me in the chat.

@Friends4it

Hello, I understand you need your FortiGate 60 configured to support secure Remote Access VPNs for three distinct user groups, each isolated to their own location's resources. I will set up precise address objects, user groups, policies, and split-tunnel configurations to ensure strict access control without cross-group exposure. With extensive expertise managing server and network infrastructure through Hostifire, where we handle similar firewall and VPN configurations daily, I’ll prepare FortiClient VPN profiles for seamless user deployment and document all firewall and routing changes comprehensively. This will be done remotely on the latest FortiOS. I can complete this setup within 3 days. Let’s discuss your VPN user count and specific resource details to start. How many users per group should the VPN configurations support initially? Sincerely, Muhammad

@emilesd617

Hi, I am a network and system engineer with 8 years of rich experience with a background in secure VPN and firewall configuration. I am familiar with FortiGate, VPN, network security, firewall policies, and troubleshooting. For this project, the most important point is strict network isolation between user groups while keeping access simple and stable. I would configure user groups, address objects, policies, and split-tunnel routing so each group only accesses its assigned resources without overlap. This is important because proper segmentation ensures security and prevents any cross-location access risks. I'm an individual freelancer and can work on any time zone you want. Please contact me with the best time for you to have a quick chat. Looking forward to discussing more details. Thanks. Emile.

@ayesha86664

Hi there! You are setting up Remote Access VPN segmentation on a Fortinet FortiGate 60 and the real challenge is strict isolation so each group only reaches its own location without any routing overlap. I recently configured role-based VPN access on a Fortinet FortiGate 60 using FortiOS for a multi-site setup, implementing user groups, firewall policies and split tunneling to isolate networks cleanly and prevent cross-site access issues. I will configure VPN user groups, create address objects for each location and apply precise firewall rules so every group securely accesses only its assigned resources through your FortiGate 60 setup. Check our work: https://www.freelancer.com/u/ayesha86664 Do your three locations already exist as defined subnets or should I build the full network object structure from scratch? I am ready to start - just say the word. Best Regards, Ayesha

@nicolasl63

Hi, I've configured this same scenario on FortiGate 60 units several times, three or more user groups connecting over SSL-VPN where each one needs to be completely isolated from the others. So I know where the gotchas are and how to avoid them. My plan would be to jump on a remote session, check your FortiOS version and pull a config backup before I change anything. Then I'd work through the setup: address objects for each location's subnets, the three user groups with local username/password auth, and individual firewall policies that lock each group strictly to its own resources. For the split tunneling I'd set up separate SSL-VPN portals tied to each group so users only get routes to their assigned location, nothing else. I'll also build the FortiClient profile you can push out to your people so they just install and connect, no manual config on their end. I'm used to working on both CLI and GUI depending on what the situation calls for, and I always document what I do. You'll get a clear writeup of every object, policy and route I create or modify, written in a way that actually makes sense when you need to revisit it later.

@lcblucas

As Official Fortinet Partners, we can secure your FortiGate 60 VPN with professional-grade group isolation. Through our exclusive access to the Fortinet Developer Network (FNDN), we utilize advanced resources and API documentation to ensure that Group A, B, and C remain strictly isolated within their assigned locations. We will handle the complete setup of user groups, security policies, and split-tunneling, providing you with ready-to-distribute FortiClient profiles and comprehensive technical documentation of all changes. Our partnership ensures a high-standard delivery with the expert support your infrastructure requires. We are available to start this remote session right away.

@moorthy978

**Bid Proposal – FortiGate 60 Multi-Group Remote Access VPN** Hi, I’m a Fortinet NSE 4 & NSE 7 certified engineer with over 7 years of experience configuring secure multi-group SSL VPNs on FortiGate appliances. I fully understand your requirements: - Three isolated user groups (A, B, and C) using local username + password authentication. - Each group can only access its own resources (Location A, B, or C) with zero cross-access. - Proper address objects, user groups, firewall policies, and split-tunnel settings. - FortiClient VPN profiles ready for distribution. - Full documentation of all changes for future maintenance. **Scope of Work:** - Create local users and three separate user groups. - Build address objects and groups for each location. - Configure SSL VPN portal with group-specific split tunneling. - Create strict firewall policies to enforce isolation. - Prepare and test FortiClient profiles (.xml format). - Provide complete documentation with screenshots and config notes. - Perform all work remotely on your current FortiOS via secure session. **Timeline:** Can be completed in a single remote session (3–5 hours) including testing. **Fixed Price:** $450 USD (all-inclusive) I will work step-by-step with your approval and ensure everything is clean and easy to maintain. If this fits your needs, please award the job and let me know your preferred time. I can start as soon as today.

@abdf2010

Hello, I am interested in your project, FortiGate 60 Remote VPN Setup. I've successfully completed projects involving System Admin, Troubleshooting, Cisco before. Happy to discuss the details whenever works for you.

@jasonp275

Dear Client, How are you? I hope this proposal finds you well. I'M A CERTIFIED & EXPERIENCED EXPERT. I am well versed with the instructed requirements for your project titled (FortiGate 60 Remote VPN Setup) This is to inform you that I have KEENLY gone through your project description, CLEARLY understood all the project requirements as instructed in your project proposal and this is to let you know that I will perfectly deliver as desired. Being in possession of all stated required skills like; (Cisco, Documentation, VPN, Windows Server, Troubleshooting, Network Security, Technical Support, System Admin, Network Monitoring and Network Administration), as this is my field of professional specialization having completed all certifications and developed adequate experience in the respective field, I hereby humbly request you to consider my bid for professional, quality and affordable services that meet all your requirements. I always guarantee timely delivery and unlimited revisions where necessary hence you are assured of utmost satisfaction when working with me. Please send me a message so that we can discuss more and seal the project. WELCOME.

@toqeer74

The exacting need for split-tunnel settings implies critical attention to network traffic management, ensuring that each of the three groups interacts solely with their designated resources. I will configure the FortiGate 60 appliance leveraging the latest FortiOS features, establishing user groups, address objects, and robust policies to enforce strict resource access. Additionally, I will develop comprehensive documentation of all changes made, ensuring your capacity for future maintenance. The initial deliverable will be prepared within 5 days, including the necessary FortiClient VPN profile settings for distribution. Should I send over a brief outline of how I'd tackle this?

@DesmondTwoTwo

It’s clear you want to tightly control access for three distinct user groups on a FortiGate 60, ensuring no overlap between their permitted resources. Setting up address objects for each location, mapping them to the right user groups, and implementing split tunneling will keep the traffic flowing only where it should. A common issue here is ensuring policies properly isolate traffic without inadvertently allowing cross-location access, especially with overlapping IP ranges or routing rules. I'll keep all configurations documented and straightforward, so managing and updating policies later will be simple and transparent. Reach out for a free consultation, happy to share a clear next step with no expectations.