7 How to forward ports Remote desktop in Fortigate

1-Configure fortigate to Internet

2-Configure lan to internet in fortigate

Port forwarding (also known as destination NAT or DNAT) is a technique used in FortiGate firewalls to allow external traffic to reach specific internal servers or services.

This environment we configure remote Desktop in Fortigate

Create Virtual IPs (VIPs):

1. Go to Policy & Objects > Virtual IPs and select the Virtual IP tab.
2. Click Create New.
3. Specify a unique name for the virtual IP.

Configure the following fields:

1. Interface: Set it to any.
2. External IP Address/Range: Enter the public external IP address.
3. Mapped IP Address/Range: Set it to the internal IP address of the server you want to forward traffic to.
4. Enable Port Forwarding: Check this option.
5. Port Forwarding Section:
6. Set the Protocol (e.g., TCP or UDP).
7. Specify the External Service Port (the port number you want to forward from the external side).
8. Set the Map to IPv4 port (the internal port on the server).

1-Create Port Forward

Policy & Object ]Virtual IPs ] Create New ]

Network

 Port Forwarding

Allow outside to inside 

Policy & Object ]Firewall Policy ]Create New ]

Firewall / Network Options

 Logging Options

To Remote Desktop

Video Guidline