To configure FortiClients VPNs to enhance security,follow these steps:

1. Main VPN (256-bit WPA3-DSS):

   • MAC Address Filter: Use a static MAC address filter to block specific MAC addresses. For example, set the main filter to block MAC address 1...1 to prevent traffic from entering this address.
   • Path Restriction Filter: Use a MAC address filter with a path restriction to block routes or MAC addresses that traffic should not enter.
   • Tor Filter: Implement a static URI filter to block Tor routes. For example, set the main filter to block URI 192.168.1.1 to prevent Tor traffic from entering this IP.

2. Secondary VPN (128-bit Diffie-Hellman):

   • MAC Address Filter: Use a MAC address filter to block specific MAC addresses or routes. For example, set the secondary filter to block MAC address 128...1 or route 192.168.1.2.
   • Path Restriction Filter: Use a MAC address filter with a path restriction to block routes or MAC addresses that traffic should not enter.

3. Third-Party VPN (Tor-based):

   • Tor Filter: Use a static URI filter to prevent Tor traffic from entering specific routes, such as URI 192.168.1.1.
   • Path Restriction Filter: Use a Tor route filter to block routes that traffic should not enter, such as route 192.168.1.2.

Configuration Tips:

• Filter Blocking: Ensure MAC address filters block traffic from entering specific MAC addresses or routes.
• Path Restrictions: Use path restrictions to prevent traffic from entering specific routes or MAC addresses.
• Tor Filtering: Configure Tor routes and routes to filter out malicious Tor connections.

By configuring these VPNs with MAC address filters and path restrictions, you can effectively block malicious traffic, reduce the number of connections that reach the main VPN, and filter out Tor traffic, creating a more secure network.