Using Forticlient with ATP200
Freshman Member
We have a requirement to use Forticlient to connect to an ATP200 .. the client connects to multiple VPNs .. and the Forticlient keeps knocking our the Windows native VPN
Is it possible ? .. to use Forticlient with Zyxel ATP200 .. currently we are connecting with IPSec VPN .. but will do SSL VPN if that is the way to make it work
If yes, do you have instructions .. especially in the configuration of the Phase 1 & 2 parameters (where do I find them in the ATP200 control panel)
Accepted Solution
-
I did some test and it doesn't seem to work.
Forticlient interface has all fields with coherent values, but client side it says "no response from the peer" and server side 5 IKE messages are recorded (only "INFO" ones, no warning nor error)
2025-01-21 16:21:30
info
IKE
Recv IKE sa: SA([0] protocol = IKE (1), AES CBC key len = 128, HMAC-SHA256 PRF, HMAC-SHA256-128, 2048 bit MODP; ).
IKE_LOG
412025-01-21 16:21:30
info
IKE
Recv:[SA][VID][VID][VID][VID][VID][VID][VID][VID]
IKE_LOG
422025-01-21 16:21:30
info
IKE
The cookie pair is : 0x5d15cc7a0b89b73e / 0x179f272d960544f1
IKE_LOG
432025-01-21 16:21:30
info
IKE
Recv Main Mode request from
IKE_LOG
442025-01-21 16:21:30
info
IKE
The cookie pair is : 0x179f272d960544f1 / 0x0000000000000000
IKE_LOG
Page
of 1
Show
items
Displaying 1 - 5 of 5USG FLEX 200
1
Master Member
All Replies
-
Hi @Force12,
Forticlient is for Forti device only. For ATP200, you may consider SecuExtender.
Zyxel Melen1 -
You can find Phase 1 & 2 parameters under settings → VPN → IPsec VPN.
0 -
I did some test and it doesn't seem to work.
Forticlient interface has all fields with coherent values, but client side it says "no response from the peer" and server side 5 IKE messages are recorded (only "INFO" ones, no warning nor error)
2025-01-21 16:21:30
info
IKE
Recv IKE sa: SA([0] protocol = IKE (1), AES CBC key len = 128, HMAC-SHA256 PRF, HMAC-SHA256-128, 2048 bit MODP; ).
IKE_LOG
412025-01-21 16:21:30
info
IKE
Recv:[SA][VID][VID][VID][VID][VID][VID][VID][VID]
IKE_LOG
422025-01-21 16:21:30
info
IKE
The cookie pair is : 0x5d15cc7a0b89b73e / 0x179f272d960544f1
IKE_LOG
432025-01-21 16:21:30
info
IKE
Recv Main Mode request from
IKE_LOG
442025-01-21 16:21:30
info
IKE
The cookie pair is : 0x179f272d960544f1 / 0x0000000000000000
IKE_LOG
Page
of 1
Show
items
Displaying 1 - 5 of 5USG FLEX 200
1
Guru Member
Categories
- All Categories
- 439 Beta Program
- 2.8K Nebula
- 200 Nebula Ideas
- 126 Nebula Status and Incidents
- 6.3K Security
- 497 USG FLEX H Series
- 323 Security Ideas
- 1.6K Switch
- 83 Switch Ideas
- 1.3K Wireless
- 49 Wireless Ideas
- 6.8K Consumer Product
- 286 Service & License
- 457 News and Release
- 89 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 95 Security Highlight
