FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
nithincs
Staff
Staff
Article Id 191671
Description
This article provides VPN location map fetching the location information of FortiGate and remote peers.

Solution
When Fortigate is connected with VPN (SSL and IPsec VPN), fortigate will do a geolocation check for the client or remote peer ip using fortiguard IP Geography DB.
Once FortiGate , fetch the location, latitude and longitude information for the DB, it will place the respective remote peer to specific location.

For example:

Let consider remote peer IP is 208.91.112.52.
# config vpn ipsec phase1-interface
    edit "test"
        set remote-gw 208.91.112.52
    next
end
FortiGate will do a geoip-query for 208.91.112.52.

As per the ip information in database, it will locate the remote peer in VPN location map.
aegon-kvm20 # dia geoip geoip-query 208.91.112.52
IP:208.91.112.52
{"city":{"geoname_id":5959538,"names":{"en":"Burnaby"}},"continent":{"code":"NA","names":{"en":"North America"}},"country":{"iso_code":"CA","names":{"en":"Canada"}},"subdivisions":[{"iso_code":"BC","names":{"en":"British Columbia"}}],"location":{"latitude":49.248810,"longitude":-122.980507,"time_zone":"America/Vancouver"},"postal":{"code":"V5G"}}



Contributors