--- title: "ADVPN : Enjoy the shortcuts" description: IPSec VPN are common to secure connectivity between networks. However maintaining many of them can be cumbersome, so why not take shortcuts? image: https://blog.easi.net/hubfs/Images/Safe2be/maze.jpg --- [![Home](https://blog.easi.net/hubfs/easi-logo.svg)](https://easi.net) Hit enter to search - [All](https://blog.easi.net/en) - [Adfinity](https://blog.easi.net/en/tag/adfinity) - [Cloud](https://blog.easi.net/en/tag/cloud) - [Easi](https://blog.easi.net/en/tag/easi) - [Microsoft](https://blog.easi.net/en/tag/microsoft) - [Rooftop](https://blog.easi.net/en/tag/rooftop) - [Security](https://blog.easi.net/en/tag/security) - [SmartSales](https://blog.easi.net/en/tag/smartsales) - [Spoom](https://blog.easi.net/en/tag/spoom) [Go back to the blog](https://blog.easi.net/en?hsLang=en) # [ADVPN : Enjoy the shortcuts](https://blog.easi.net/en/advpn-enjoy-the-shortcuts) [![Author Avatar](https://blog.easi.net/hubfs/JDER-1.jpg) Jérémy Derzelle Expert System Engineer, EASI](https://blog.easi.net/en/author/jérémy-derzelle) IPSec VPN are common to secure connectivity between networks. However maintaining many of them can be cumbersome, so why not take shortcuts? Securing network connections with IPSec [VPN](https://blog.easi.net/en/why-easis-cloud2be-solution-different-other-cloud-solutions?hsLang=en) has been popular for decades. When connectivity only involves 2 sites which needs to talk to each other, it's pretty straight forward. However, when moving to more than 2 sites, the situation gets more complicated. ## VPN with multiple sites There are **2 main options** for making a VPN design with multiple sites: ### **1. Hub and Spoke** In this scenario, one site is acting as the "Hub" (central site) and all other "Spokes" sites (remote sites) connect to it. The amount of tunnels required is limited to the total of sites -1 (7 sites in total = 6 tunnels).  The major drawback of this design is that all connections between Spokes sites are going through the Hub site. This means that the hub site has to be oversized to handle this extra load (processing power + line speed) and it introduces additional latency. ### **2. Full Mesh ** In this scenario, each site is connected to all others sites. While it counter the drawback of the "hub and Spoke" design, it has its own major drawback : the total tunnels.The amount of tunnels can be calculated with this formula (n = number of sites) : n\*(n-1)/2 For a small number of sites, this is manageable, however it quickly tends to increase the complexity and the provisioning efforts become huge. For the above example of 7 sites, the number of tunnels would be 21 tunnels. Adding a single site would total 28 tunnels. Not to mention "hybrid" "ad hoc" solutions, based on a Hub and Spoke design, but with some direct Spoke to Spoke tunnels manually created whenever needed... ## Is automation the solution? You may think that automating - via scripting or with a central management system - the deployment of these tunnels gives you the advantage of full mesh without any drawback. Although you are partially right, there are still drawbacks to consider: - **Increase of configuration:** The size configuration still increases on every sites. - **Increase of system load:** Maintaining all tunnels and configurations requires extra resources. - **Deployment risk:** every time you add a new site, you have to make sensitive configuration changes on ALL your devices. ## ADVPN Fortunately, Fortinet offers us a solution: ADVPN. **Auto Discovery VPN**.  ADVPN aims to give you the best of both worlds. The base configuration is similar to Hub and Spoke with the ability to create shortcuts tunnel between spokes dynamically on demand. ![ADVPN_Picture](https://blog.easi.net/hs-fs/hubfs/Images/Safe2be/ADVPN_Picture.jpg?width=1224&name=ADVPN_Picture.jpg) ADVPN uses IPSec to secure the communication and iBGP to exchange routes dynamically. Introducing a new Spoke in the topology results in near zero-touch provisioning on the Hub and no provisioning at all on existing Spokes. The final result is similar to what you can achieve with Cisco DMVPN using NHRP. ## Supported devices ADVPN is supported on all Fortigate running FortiOS 5.4 or more. The ability to use ADVPN is automatically included and does not require any additional licenses. ## Interested? [Get in touch with us](https://safe2be.easi.net/contact-us) and we will be happy to help you optimizing your multi-site VPN connectivity with Fortinet and ADVPN! [![NIS2 whitepaper](https://no-cache.hubspot.com/cta/default/473564/557ec3b4-93c4-41fa-b0a3-8a44ccfdf5bb.png)](https://cta-redirect.hubspot.com/cta/redirect/473564/557ec3b4-93c4-41fa-b0a3-8a44ccfdf5bb) [Security](https://blog.easi.net/en/topic/security?hsLang=en) [Fortinet](https://blog.easi.net/en/topic/fortinet?hsLang=en) [Fortigate](https://blog.easi.net/en/topic/fortigate?hsLang=en) [IPSec VPN](https://blog.easi.net/en/topic/ipsec-vpn?hsLang=en) [ADVPN](https://blog.easi.net/en/topic/advpn?hsLang=en) [VPN](https://blog.easi.net/en/topic/vpn?hsLang=en) [Auto Discovery VPN](https://blog.easi.net/en/topic/auto-discovery-vpn?hsLang=en) [Virtual Private Network](https://blog.easi.net/en/topic/virtual-private-network?hsLang=en) ## Current job openings [Junior Account Manager](https://www.easi.net/jobs/offers/job-junior-account-manager-leuven-nijvel-ghent) Leuven [Junior Business Consultant](https://www.easi.net/jobs/offers/job-junior-business-consultant-nivelles-leuven) Nivelles [Project Manager](https://www.easi.net/jobs/offers/job-project-manager-louvain) Leuven ### Get our top stories in your inbox every month ## Follow us [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/easi.net) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](https://www.linkedin.com/company/easi) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/easi_net) ## Recent posts ![Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%286%29-1.png) ### [Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/en/solutions/microsoft/copilot-cowork-is-now-available?hsLang=en) 16/10/2018 ![Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%283%29.png) ### [Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/en/solutions/microsoft/m365-archive-file-level?hsLang=en) 16/10/2018 ![GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20Protect%20-%20EN%20%281%29.png) ### [GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/en/solutions/security/grc-in-belgium-why-protect-is-where-insight-becomes-action?hsLang=en) 16/10/2018 ## Share this article [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.easi.net%2Fen%2Fadvpn-enjoy-the-shortcuts%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fadvpn-enjoy-the-shortcuts%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.easi.net%2Fen%2Fadvpn-enjoy-the-shortcuts%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fadvpn-enjoy-the-shortcuts%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=ADVPN%20%3A%20Enjoy%20the%20shortcuts) ### Never miss our stories ## Related articles [See all blog articles](https://blog.easi.net/en/tag/security) ![GRC in Belgium: Why Identify Is the Foundation of Cyber Resilience](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20EN%20%283%29.png) ### [GRC in Belgium: Why Identify Is the Foundation of Cyber Resilience](https://blog.easi.net/en/solutions/security/grc-in-belgium/why-identify-is-the-foundation-of-cyber-resilience?hsLang=en) In many organisations, cybersecurity is still seen as a technical domain. Something owned by IT,... [Read more](https://blog.easi.net/en/solutions/security/grc-in-belgium/why-identify-is-the-foundation-of-cyber-resilience?hsLang=en) ![GRC in Belgium: How organizations maintain oversight in a growing regulatory landscape](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20EN.png) ### [GRC in Belgium: How organizations maintain oversight in a growing regulatory landscape](https://blog.easi.net/en/solutions/securitygrc-in-belgium-how-organizations-maintain-oversight?hsLang=en) In recent years, digital regulation in Europe has accelerated significantly. New frameworks focused... [Read more](https://blog.easi.net/en/solutions/securitygrc-in-belgium-how-organizations-maintain-oversight?hsLang=en) ![The Most Common Cyber Incidents Today](https://blog.easi.net/hubfs/The%20Most%20Common%20Cyber%20Indicents%20Todays%20-%20EN.png) ### [The Most Common Cyber Incidents Today](https://blog.easi.net/en/the-most-common-cyber-incidents?hsLang=en) Cyber-attacks are no longer exceptional crisis situations. Today, they are part of the daily... [Read more](https://blog.easi.net/en/the-most-common-cyber-incidents?hsLang=en) - [Solutions](https://www.easi.net) - [AAA Financials](https://www.easi.net/en/solutions/aaa-financials) - [Adfinity](https://adfinity.easi.net) - [Cloud2be](https://www.easi.net/en/solutions/managed-cloud) - [Rooftop](https://www.easi.net/en/solutions/rooftop) - [Security](https://www.easi.net/en/solutions/security) - [SmartSales](https://www.easi.net/en/solutions/smartsales) - [SmartDrive](https://smartdrive.easi.net) - [SmartShare](https://smartshare.easi.net) - [Synchro Production](https://www.easi.net/en/solutions/synchro-production) - [Services](https://www.easi.net/en/services) - [Mobile Development](https://www.easi.net/en/services/mobile-development) - [Software development](https://www.easi.net/en/services/application-development) - [Managed Services](https://www.easi.net/en/services/managed-services) - [On Premise infrastructure](https://www.easi.net/en/services/it-infrastructure-projects) - [Cosourcing](https://www.easi.net/en/services/co-sourcing) - [End user support](https://www.easi.net/en/services/end-user-support) - [Company](https://www.easi.net) - [About EASI](https://www.easi.net/en/about-easi) - [Jobs](https://www.easi.net/en/jobs) - [Blog](https://blog.easi.net) - [Press](https://www.easi.net/en/press) - [Customer stories](https://www.easi.net/en/customer-stories-references) - [Trainings](https://www.easi.net/en/trainings) - [Events](https://www.easi.net/en/events) - [Customer support](https://www.easi.net/en/customer-support) - [Legal](https://www.easi.net/en/about/legal/website-privacy-policy) - Useful links - [Microsoft](https://www.easi.net/en/services/microsoft) - [IBM Power Systems](https://www.easi.net/en/services/ibm-power-systems) - [IBM Notes](https://www.easi.net/en/services/ibm-notes) - [EASI Jump](https://www.easi.net/en/easi-jump) - [Privacy](https://www.easi.net/about/legal/website-privacy-policy) - [info@easi.net](mailto:info@easi.net) - [+32 67 28 10 00](tel:+3216313000) - [Contact](https://www.easi.net/en/contact) - - - - - -