• All Files

Home > Online Help

Dialup IPsec VPN with Application control example

This example includes these steps:

1. FortiGate unit receives IPsec encrypted packet from the Internet.
2. Packet intercepted by FortiGate unit interface.
3. DoS sensor checks to ensure the sender is valid and not attempting a denial of service attack.
4. IP integrity header checking. If the packet is OK it continues, otherwise it is dropped.
   
5. IPsec

• Packet matches IPsec phase 1
• Packet is unencrypted

6. Interface policy
7. Destination NAT
8. Next hop route
9. Stateful Inspection

• Session Tracking

9. Flow-based inspection

• IPS
• Application Control

10. Source NAT
11. Routing
12. Interface transmission to network
13. Packet forwarded to internal server

Response from server

1. Server sends response packet
2. Packet intercepted by FortiGate unit interface
3. DoS sensor checks to ensure the sender is valid and not attempting a denial of service attack.
4. IP integrity header checking. If the packet is OK it continues, otherwise it is dropped.
5. Destination NAT

6. Flow-based inspection

• IPS
• Application Control

7. Stateful Inspection

• Session Tracking

8. IPsec

• Packet is encrypted

9. Routing
10. Interface transmission to network
11. Encrypted Packet returns to internet