Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.107
Athena NGFW (Next-Generation Firewall) {{ breadTitle }} User Manual Network Sangfor/IPSec VPN IPsec VPN Tunnel Between Athena NGFW and Fortinet (Policy Mode) Procedures Configure the Fortinet Firewall
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","Configure the Fortinet Firewall")}}

Configure the Fortinet Firewall

{{ $t('productDocDetail.updateTime') }}: 2026-04-29

Steps

Step 1.Configure the interface IP addresses.

Step 2.Configure a default route to connect to the Internet.

Step 3.Create an IPsec VPN tunnel.

  1. Go to VPN > IPsec Tunnels, click Create New, and select IPsec Tunnel, as shown in the following figure.

  1. On the VPN Creation Wizard page, specify the name, select a custom template, and click Next.

  1. Configure the network, authentication, phase 1, and phase 2 settings as required, as shown in the following figures.

1.If there is a NAT between the Athena NGFW and Fortinet firewalls, you must specify Local ID.

2.You need to change the local and remote addresses of the selector. By default, the local and remote addresses are all-0 addresses.

Step 4.Configure a security policy to allow business traffic from zones associated with the Internet-facing interface, internal-facing interface, and tunnel interface.

Step 5.Configure a route to route traffic to the tunnel interface.

In Athena NGFW in policy mode, you cannot specify the VPN tunnel interface or configure dynamic OSPF/BGP routing.