Aside from the hard-coded embryonic limit that varies by model, if a customer wanted to manually throttle or control the number of IPSec clients that can simultaneously connect to a FortiGate, is there a way to do that? Maybe via an IPSec configuration, a DOS sensor, traffic shaper or anything?
Hello,
There is an option to limit the SSL VPN users and dial up VPN tunnels to a maximum number per VDOM.
SSL VPN users and IPsec dialup limits can be defined as follow:
# config global
# config system vdom-property
edit "test_VDOM"
set sslvpn 200
set dialup-tunnel 300
end
end
