Questions tagged [fortigate]
For questions about Fortigate, the UTM product line from Fortinet
114
questions
1
vote
0
answers
31
views
VPN IPSEC between SonicWall and FGT [closed]
thanks for your help in advance. First of all i must to say i'm really newbie working with SonicWall.
At this moment i'm trying to comunicate 2 sites with VPN IPSEC beetween Fortigate <--> ...
- 11
0
votes
0
answers
38
views
Capture switched traffic on fortigate
I have a fortigate 40F with an lan1 to lan4 configured as an hardware switch (lan).
I would like to capture switched traffic between hosts, even if it's not in the same IP subnet than the lan ...
- 425
1
vote
1
answer
85
views
FSSO Collector agent show old logs
Troubleshooting serious issue with FSSO - Users not getting access to internet because the primary FSSO agent fails to receive those user log on events. out of 3 agents configured (2 in DC1 and 1 in ...
- 11
1
vote
1
answer
58
views
Is an ICMPv6 neighbor advertisement meaningful if no options are set?
This is what I think a normal ICMPv6 neighbor advertisement should look like:
It says "I'm 2001:57a:d000::54 and you can reach me at 02:02:53:85:21:25". This is what neighbor advertisements ...
- 113
2
votes
2
answers
323
views
FortiGate: IPSec peer-to-peer and two remote peers
I have a FortiGate firewall in the main office and some branches with Cisco ASA. An IPsec tunnel runs between the main office and each branch. Some branches have two ISP - main and reserve. For ...
- 155
0
votes
0
answers
56
views
FortiGate 100E update through SquidProxy
I need to update a backend Fortinet FortiGate100E firewall and the only machine in the network whose ip address is authorized for internet access (from the frontend firewall) is 10.1.2.3 running ...
- 183
0
votes
1
answer
77
views
Connect AP to Fortinet
I'm very new to Firewalls. Internet to my servers goes through a Fortinet Firewall. I wanted to add a wifi connection for other users as well, so I connected a NetGear Router as Access Point and gets ...
1
vote
1
answer
233
views
Fortigate 100E user names in syslog
I am monitoring the traffic from a Fortinet Fortigate 100E firewall and I am seeing the user name of a former employee whose local and domain accounts were deleted. I can't ask Fortinet support ...
- 183
1
vote
1
answer
434
views
Fortigate VPN Site to Multi Site
I have 4 sites running ipsec vpn on a fortigate 30E as below:
Site A (HQ)
Site B (Branch1)
Site C (Branch2)
Site D (Branch3)
The connection is made from branches (B,C,D) to HQ (A) and is working ...
- 11
2
votes
1
answer
665
views
I can't ping the gateway IP (fe80::1) from the internal port in my fortigate 60f firewall
I am using a fortigate 60f firewall. I have configured it for both ipv4 and ipv6. I have used the SD wan (by adding wan1 and wan2) for load-balancing. Moreover, I have configure a default static route ...
1
vote
1
answer
602
views
FortiGate & FortiAuthenticator - Mapping users to Groups for VPN using Radius
I need help from you guys since I can't find anything wrong with my setup and it still doesn't work:
I authenticate my Fortigate SSLVPN users against FortiAuthenticator. I want to map some users to a ...
- 147
2
votes
1
answer
654
views
Can a QSFP28 port break out to 4 SFP+ ports to separate hosts?
I apologize in advance because I suspect this is already covered. I've read some of the posts and I suspect the answer is "it depends on the vendors involved" or just "no".
I'm ...
- 123
0
votes
0
answers
67
views
read traffic/bandwidth usage by protocol
I need to analyze the traffic of a Fortigate Firewall in my program.
Currently, I can read the overall traffic using SNMP.
The problem is that I need to analyze the type of traffic (HTTP, video ...
- 101
0
votes
1
answer
612
views
FortiOS 5.2.11 SSLVPN Split Tunneling route FQDN [closed]
Is there anyone who has the experience to configure FortiGate SSL VPN split-tunneling to route FQDN object?
What I am trying to do is we need to access some websites that can only use our office WAN ...
1
vote
1
answer
1k
views
2FA Setup for FortiGate SSL VPN
Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
- 23
0
votes
3
answers
334
views
Two 100mb ports on different networks on FortiGate 110C
If you allow me I have a quite far fetched question...
I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate.
Therefore I cant have 200mb/s ...
- 1
1
vote
1
answer
42
views
User Upload Quota Fortigate - 501E (6.2.1)
Im using a Fortigate 501E.
my requirement is: Every user can’t upload more than 1 GB per day.
is it possible to implement the above requirement. Thanks
0
votes
2
answers
786
views
Switch to secondary firewall when WAN interface goes down
We are having two firewalls A and B. The model is FortiGate 60E.
Both are running in HA where A is primary and B is secondary. The firewalls are running smoothly and traffic is flowing from the WAN ...
0
votes
1
answer
1k
views
Fortigate and ipv6 routing
I have a Fortigate router and my ISP support ipv6. I'm getting a public ipv6 on the Fortigate and also on the computers on the lan (2a02:a18:9041....)
I have not to much understanding of ipv6, but by ...
- 113
0
votes
3
answers
1k
views
How can i find which cisco switch port is connnected to specific port of Fortigate?
there is any way to find that which switch port connected to mgmt port of fortigate?
for example can i enable lldp on Cisco switch and Fortigate together?
Fortigate 1500D (version 5.6.2) and switch is ...
0
votes
3
answers
138
views
Enrutar Vlans en FortiGate 80E
Good afternoon, I currently have a Fortigate 80E. which has 2 ports used, in port 1 comes vlan 4 and in port 2 enters vlan 2.
But I can't find a way to route them to each other.
If I create static ...
1
vote
1
answer
2k
views
Command to get full configuration in Fortianalyzer
Could anyone please tell me how to get the full configuration info in Fortianalyzer ver 6.0.6.
I’m an entry level of a network engineer.
It would be nice if you can help me with simple English.
...
- 11
0
votes
1
answer
654
views
Can CLI commands be run of a FortiGate from crontab?
I have a recurring occurance at 02:30 (2:30 AM) every night, where DNS name resolutions fail.
I'd like to run the following CLI commands on our FortiGate 60D at 02:20, so I'll have some data to debug ...
- 101
1
vote
1
answer
2k
views
Dropping packets between router and firewall without firewall rule
I have a user that is trying to access his company network resources on his home network. He is able to access SMB shares and other resources, but he is unable to access their AS400 on any computer in ...
- 21
2
votes
1
answer
505
views
Fortigate 800C is not displaying the data for IDS/sniffer traffic on Log&Report
I have a Fortigate 800C in Flow based inspection and configured one-arm sniffer mode on an interface and configured a firewall sniffer with below config
config firewall sniffer
set ips-sensore-...
- 21
1
vote
2
answers
461
views
NAT Problem Fortigate 501e v6.0
I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
- 43
3
votes
3
answers
6k
views
Fortigate: enabling directed broadcast to broadcast conversion on last hop?
I'm not quite certain how to achieve the equivalent of ip directed broadcast with a FortiGate. In this case a FortiGate 60E with FortiOS 5.6.7. So I started to dig a little.
QUESTION:
Can anyone ...
- 7,748
2
votes
1
answer
3k
views
MAC Address Filtering Fortinet v6.0
I am having trouble configuring mac filtering. I do not use DHCP but am trying to figure out a way to set a mac address on a port and create a rule to block that specific mac address. So when I try ...
- 43
1
vote
1
answer
154
views
Unable to Ping Past Firewall
I am trying to get communication across a firewall, but I am unable to ping anything past the firewall.
PC1:172.16.201.22 <-> Router:172.16.192.1 <-> Firewall_Port1:10.10.10.4 <-> ...
- 43
2
votes
1
answer
75
views
Stopping logging info from interrupting CLI session?
With cisco devices the logging synchronous command will stop logging output from interrupting the the CLI session. Is there an equivalent command for the fortigate firewalls? i.e. When running a debug ...
- 23
1
vote
2
answers
1k
views
Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working
Client -> VPN -> FG1 -> FG2 -> Server
Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32
on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6
...
- 131
2
votes
1
answer
173
views
Cannot Ping Firewall After Changing SFP
I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...
- 43
0
votes
1
answer
358
views
Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]
Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
- 103
0
votes
2
answers
709
views
In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?
Organisation don't have AS number .As of now we are doing manually route for any ISP at a time.
when default Internet link is go down that time making second link enable on firewall.
I saw the some ...
2
votes
3
answers
1k
views
Multiple url filter list in fortigate
is this possible to use multiple urlfilter lists in web filtering on fortigate? I need to block specified sites for one user group and other sites for another user group but it looks like there is ...
- 71
1
vote
1
answer
5k
views
How to check last executed commands by users at FortiGate
How to check last executed commands by users at FortiGate firewall like show cli history at SRX firewall
1
vote
2
answers
843
views
Fortigate 60D - WAN Link Traffic Division
Requirement is to divide the WAN zone traffic
Two different LAN IP group's internet traffic should go though 2 different WAN connections in fortigate 60D (Currently its WAN Zone(wan1 and wan2) . How ...
- 13
0
votes
1
answer
113
views
Setting up Hardware for HA
After designing this I went in to start configuring equipment and quickly realized I was missing alot of information/understanding.
So the switches (A) between the modem and routers, do they need to ...
0
votes
1
answer
3k
views
Unable to ping Google-AWS Fortigate firewall-SOLVED
Followed this guide:
https://cookbook.fortinet.com/create-routing-table-associate-subnets/
I have EC2 windows instance, also have EC2 FortiGate-FortiGate VM64-AWSONDEMAND
. Fortigate has 2 NIC:
192....
- 131
1
vote
0
answers
99
views
Fortigate Radius Reply Message
I have setup a Microsoft NPS radius server for my Fortigate firewall and i want to display reason of fail login to the users in Fortigate fail page (for example display "You can not login during this ...
- 111
3
votes
3
answers
2k
views
Direction incoming vs outgoing in logs
I'm trying to understand some Fortinet firewall logs but I'm not sure I fully understand what is being logged by the firewall when it comes to direction (Incoming vs Outgoing)
For example:
srcip=7.7....
- 157
1
vote
1
answer
691
views
IP is getting through from firewall although it was in Banned List
I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
- 1,260
4
votes
4
answers
5k
views
How to check the ifIndex on a Fortigate 1500D?
What is the exact command to check the port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate?
The command diagnose sys device list root displays the index which isn't ...
1
vote
2
answers
4k
views
Fortigate Web Filter fails to block Facebook on Google Chrome
This is a weird phenomenon I noticed today: even though Social Networking Sub-category is set to "block" on Web Filter, users who use Google Chrome still have access to it.
I tried with Firefox and ...
- 147
5
votes
2
answers
13k
views
How to flush route cache in fortigate
Is there something like route cache on fortigate like in linux?
How can i clear this cache?
I have some problems with OSPF, after adding or changing redistributed network. Foritgate show routes ...
- 71
3
votes
2
answers
561
views
Cisco SG300 and Fortigate 90D integration
I need help in setting up my network, currently I have the following setup.
All the computers can browse the internet but when I tried to create a two groups (a group that can access the internet and ...
Max Surban
2
votes
2
answers
1k
views
Fortigate 200e as backbone switch
As part of the reorganization of the network of my company, I intend to apply the fortilink architecture, so I want to know if the fortigate 200e can also play the role of the backbone switch of ...
- 23
0
votes
1
answer
3k
views
link-monitoring in fortigate
]3i am trying for a failover between two ISP interfaces using link-monitor in fortigate. both ISP links are vlan interface ( ie, not physical). and with my primary ISP, i have eBGP. i need to monitor ...
- 388
2
votes
1
answer
2k
views
Fortigate 90D, web console unavailable, SSH console hangs on certain commands
The web console just gets connection refused.
The SSH console connects but hangs when when i:
Attempt to change the configuration. (Hangs after the end command)
Attempt to restore from a config ...
- 201
1
vote
1
answer
901
views
Fortigate 90D SD-WAN: VPN and VoIP
i am contemplating the idea of switching our current FG 80D to a 90D and implement SD-WAN using our current 100Mbit fiber circuit (main) and the 4G LTE (cradlepoint) for internet backup.
Our current ...
- 11