italk(IT)

 OpenVPN with User and Certificate Authentication have 2 levels of security because it have user authen and certificate that match with CA server.

OpenVPN with User Authentication and Certificate Authentication is separate from OpenVPN with User and Certificate Authentication. I have 1 level of security and easy to setup.

SSL VPN is virtual private network with SSL. You must connect VPN before remote to your server from anywhere. SSL VPN is safer than port forwarding because it have authen factor and connect with SSL.

When you connect OpenVPN on connecting process it show warning about Cache Password in Memory. The password may be contain on a bit of memory address. This issue can be fix follow video.

You can config some feature on fortigate firewall via CLI Example When you want to import many devices and add devices to device group you should config via CLI because on WebUI have not import device function.

When you have many user on your organization. local user management on pfsense may not easy to manage user. Free radius is user management that better than local user management. It can limit bandwidth per user apply on captive portal, static IP for user, etc.