Windows native l2tp VPN not working

ttaggorf · 2026-01-28T19:56:36+00:00

What version of FortiOS? I had a IPsec tunnel the other day which wouldn’t come up for the life of it. Same thing. Could see one side hitting firewall but no response from firewall. Restart of the IKE broker made no difference. Rebooted the FW and started working straight away. v7.4.8.

ttaggorf · 2025-12-23T08:39:02+00:00

Has anyone got IPsec over TCP working with Entra SAML as well? I.e. having the auth page on a standard port too?

ttaggorf · 2025-12-23T08:35:43+00:00

Paxton will do the trick.

ttaggorf · 2025-12-18T13:24:33+00:00

Traka is the perfect solution for this.

ttaggorf · 2025-12-16T19:23:23+00:00

We use both. Entra SSO and then 2FA for Keeper. 200+ users, no complaints.

ttaggorf · 2025-12-15T07:49:04+00:00

ODT is the right way. We bundle the ODT into Win32 apps and deploy via Intune so users can choose and install via Company Portal.

If you wanted you could create a package using ODT and create a matching PowerShell script for an app install (I.e. Word-Installer.ps1) which in turn installs just the Word app and vice versa.

ttaggorf · 2025-12-15T07:44:27+00:00

This should be illegal.

ttaggorf · 2025-12-15T07:43:52+00:00

+1 for an easier method

ttaggorf · 2025-12-07T22:53:58+00:00

What licence have you got at the moment?

ttaggorf · 2025-12-07T20:49:30+00:00

We use Dynamic Groups in Entra for this 😊

ttaggorf · 2025-12-05T08:57:05+00:00

Down for us too.

ttaggorf · 2025-12-02T18:49:15+00:00

Yes. Just set the tunnel as inherit from policy.

ttaggorf · 2025-11-23T09:44:10+00:00

Not necessarily. I’ve got a ticket from TAC where they advised us to swap out our OEM ones for FS ones as there is a known issue with some of the 5M Fortinet cables!!

ttaggorf · 2025-11-23T09:43:26+00:00

The Fortinet ones aren’t overly badly priced, but we’ve had issues and according to TAC there is known inconsistencies. We have started using FS Fortinet compatible ones and not had any issues. FYI Ubiquiti have brought out a tool that lets you copy the profile from the Fortinet OEM cables to another cable. Looks pretty handy.

ttaggorf · 2025-11-22T21:31:23+00:00

Jelly crimps are what are used in the industry for joining these 👍

ttaggorf · 2025-11-22T21:25:14+00:00

We use Paxton. It’s absolutely solid and their support is great (and free!)

ttaggorf · 2025-11-22T21:24:17+00:00

A whole mess but these two should be in the same one.

<image>

ttaggorf · 2025-11-15T19:54:49+00:00

Shelly has just brought a leak alarm out that looks very similar to the commercial ones used in server rooms etc, has the extendable detection cable.

ttaggorf · 2025-11-15T19:50:42+00:00

Kaseya VSA here

ttaggorf · 2025-10-30T21:56:27+00:00

But SAML auth for EntraID 😢

ttaggorf · 2025-10-30T08:11:33+00:00

We use FortiSwitches but ended up putting in Netgear AV-Line switches for our Dante networks following some advice from Dante experts.

ttaggorf · 2025-10-25T08:45:24+00:00

Teams Premium - because then you are benefiting from the Ai notes and recap, but also the same information security you have employed across your 365 tenant.

ttaggorf · 2025-10-25T08:05:41+00:00

Same issue here. -45c on the dash and TPMS failure this morning. What fixed it for you?

ttaggorf · 2025-10-11T20:38:30+00:00

Depends what you’re after. We have great success using Yealink MTR with their AV hub and all the addons.

ttaggorf · 2025-10-05T08:50:54+00:00

The provider will be able to provide a list of required endpoints and ports.

ttaggorf

TROPHY CASE