Questions tagged [fortigate]
For questions about Fortigate, the UTM product line from Fortinet
100
questions
0
votes
1answer
47 views
Fortigate and ipv6 routing
I have a Fortigate router and my ISP support ipv6. I'm getting a public ipv6 on the Fortigate and also on the computers on the lan (2a02:a18:9041....)
I have not to much understanding of ipv6, but by ...
0
votes
2answers
47 views
How can i find which cisco switch port is connnected to specific port of Fortigate?
there is any way to find that which switch port connected to mgmt port of fortigate?
for example can i enable lldp on Cisco switch and Fortigate together?
Fortigate 1500D (version 5.6.2) and switch is ...
0
votes
3answers
27 views
Enrutar Vlans en FortiGate 80E
Good afternoon, I currently have a Fortigate 80E. which has 2 ports used, in port 1 comes vlan 4 and in port 2 enters vlan 2.
But I can't find a way to route them to each other.
If I create static ...
0
votes
1answer
67 views
Command to get full configuration in Fortianalyzer
Could anyone please tell me how to get the full configuration info in Fortianalyzer ver 6.0.6.
I’m an entry level of a network engineer.
It would be nice if you can help me with simple English.
...
0
votes
1answer
62 views
Can CLI commands be run of a FortiGate from crontab?
I have a recurring occurance at 02:30 (2:30 AM) every night, where DNS name resolutions fail.
I'd like to run the following CLI commands on our FortiGate 60D at 02:20, so I'll have some data to debug ...
0
votes
0answers
95 views
Fortigate SSL VPN Tunnel - How connect to different network
I have a router and a fortigate firewall. The router has 2 active interface 192.168.100.2 and 192.168.160.1 while the fortigate interface with IP address 192.168.100.249. There is a server with IP add ...
1
vote
1answer
180 views
Dropping packets between router and firewall without firewall rule
I have a user that is trying to access his company network resources on his home network. He is able to access SMB shares and other resources, but he is unable to access their AS400 on any computer in ...
2
votes
1answer
106 views
Fortigate 800C is not displaying the data for IDS/sniffer traffic on Log&Report
I have a Fortigate 800C in Flow based inspection and configured one-arm sniffer mode on an interface and configured a firewall sniffer with below config
config firewall sniffer
set ips-sensore-...
1
vote
1answer
68 views
NAT Problem Fortigate 501e v6.0
I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
3
votes
3answers
759 views
Fortigate: enabling directed broadcast to broadcast conversion on last hop?
I'm not quite certain how to achieve the equivalent of ip directed broadcast with a FortiGate. In this case a FortiGate 60E with FortiOS 5.6.7. So I started to dig a little.
QUESTION:
Can anyone ...
2
votes
1answer
862 views
MAC Address Filtering Fortinet v6.0
I am having trouble configuring mac filtering. I do not use DHCP but am trying to figure out a way to set a mac address on a port and create a rule to block that specific mac address. So when I try ...
0
votes
0answers
55 views
Issue with Fortigate 501E and ESXi 6.5
I have quite a strange phenomenon with a setup involving Fortinet's FG 501E Active/Standby cluster and an ESXi 6.5.
I have one vSwitch inside the ESXi, to which two uplink (physical) interfaces are ...
1
vote
1answer
90 views
Unable to Ping Past Firewall
I am trying to get communication across a firewall, but I am unable to ping anything past the firewall.
PC1:172.16.201.22 <-> Router:172.16.192.1 <-> Firewall_Port1:10.10.10.4 <-> ...
1
vote
1answer
26 views
Stopping logging info from interrupting CLI session?
With cisco devices the logging synchronous command will stop logging output from interrupting the the CLI session. Is there an equivalent command for the fortigate firewalls? i.e. When running a debug ...
1
vote
2answers
240 views
Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working
Client -> VPN -> FG1 -> FG2 -> Server
Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32
on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6
...
0
votes
0answers
426 views
Configure fortigate port to be on the same vlan as a fortiswitch port
I have a Fortigate 61E setup with port 1 for Fortilink on this port i have set up all my vlan gateways as well. but now i have a new device beside the fortigate how can i add port 2 to vlan 10 that is ...
2
votes
1answer
79 views
Cannot Ping Firewall After Changing SFP
I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...
0
votes
1answer
103 views
Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]
Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
0
votes
1answer
240 views
In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?
Organisation don't have AS number .As of now we are doing manually route for any ISP at a time.
when default Internet link is go down that time making second link enable on firewall.
I saw the some ...
2
votes
2answers
235 views
Multiple url filter list in fortigate
is this possible to use multiple urlfilter lists in web filtering on fortigate? I need to block specified sites for one user group and other sites for another user group but it looks like there is ...
1
vote
1answer
1k views
How to check last executed commands by users at FortiGate
How to check last executed commands by users at FortiGate firewall like show cli history at SRX firewall
1
vote
2answers
376 views
Fortigate 60D - WAN Link Traffic Division
Requirement is to divide the WAN zone traffic
Two different LAN IP group's internet traffic should go though 2 different WAN connections in fortigate 60D (Currently its WAN Zone(wan1 and wan2) . How ...
0
votes
1answer
93 views
Setting up Hardware for HA
After designing this I went in to start configuring equipment and quickly realized I was missing alot of information/understanding.
So the switches (A) between the modem and routers, do they need to ...
0
votes
1answer
1k views
Unable to ping Google-AWS Fortigate firewall-SOLVED
Followed this guide:
https://cookbook.fortinet.com/create-routing-table-associate-subnets/
I have EC2 windows instance, also have EC2 FortiGate-FortiGate VM64-AWSONDEMAND
. Fortigate has 2 NIC:
192....
1
vote
0answers
85 views
Fortigate Radius Reply Message
I have setup a Microsoft NPS radius server for my Fortigate firewall and i want to display reason of fail login to the users in Fortigate fail page (for example display "You can not login during this ...
3
votes
1answer
696 views
Direction incoming vs outgoing in logs
I'm trying to understand some Fortinet firewall logs but I'm not sure I fully understand what is being logged by the firewall when it comes to direction (Incoming vs Outgoing)
For example:
srcip=7.7....
1
vote
1answer
415 views
IP is getting through from firewall although it was in Banned List
I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
3
votes
3answers
2k views
How to check the ifIndex on a Fortigate 1500D?
What is the exact command to check the port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate?
The command diagnose sys device list root displays the index which isn't ...
1
vote
2answers
2k views
Fortigate Web Filter fails to block Facebook on Google Chrome
This is a weird phenomenon I noticed today: even though Social Networking Sub-category is set to "block" on Web Filter, users who use Google Chrome still have access to it.
I tried with Firefox and ...
3
votes
1answer
4k views
How to flush route cache in fortigate
Is there something like route cache on fortigate like in linux?
How can i clear this cache?
I have some problems with OSPF, after adding or changing redistributed network. Foritgate show routes ...
3
votes
1answer
351 views
Cisco SG300 and Fortigate 90D integration
I need help in setting up my network, currently I have the following setup.
All the computers can browse the internet but when I tried to create a two groups (a group that can access the internet and ...
2
votes
2answers
803 views
Fortigate 200e as backbone switch
As part of the reorganization of the network of my company, I intend to apply the fortilink architecture, so I want to know if the fortigate 200e can also play the role of the backbone switch of ...
0
votes
1answer
2k views
link-monitoring in fortigate
]3i am trying for a failover between two ISP interfaces using link-monitor in fortigate. both ISP links are vlan interface ( ie, not physical). and with my primary ISP, i have eBGP. i need to monitor ...
2
votes
1answer
1k views
Fortigate 90D, web console unavailable, SSH console hangs on certain commands
The web console just gets connection refused.
The SSH console connects but hangs when when i:
Attempt to change the configuration. (Hangs after the end command)
Attempt to restore from a config ...
1
vote
1answer
743 views
Fortigate 90D SD-WAN: VPN and VoIP
i am contemplating the idea of switching our current FG 80D to a 90D and implement SD-WAN using our current 100Mbit fiber circuit (main) and the 4G LTE (cradlepoint) for internet backup.
Our current ...
2
votes
2answers
584 views
Fortigate interfaces in policies
What are the implications of not using interfaces when defining policies on fortigate firewalls?
i.e
Policy would be
edit 1
set srcintf "any"
set dstintf "any"
set srcaddr "ip-192.168.1....
1
vote
2answers
5k views
fortigate 50e conditional forwarding
my first post here, any help is appreciated.
I have a fortigate 50E with a bunch of PCs connected to it which form my internal network. One of the PCs is running a web app (Confluence to be precise). ...
0
votes
1answer
459 views
Do I have to reboot the Fortigate 1000c after modification on static route?
I am using a Fortigate 1000c working on NAT mode. It has two WAN connections (WAN1 and WAN2). I am using a static route.
For some reasons, There are many firewalls and routers (Cisco, TP-Link and so.....
0
votes
1answer
592 views
how to discover devices in a large heterogenous network with huawei, cisco, alcatel and more different devices without using snmp?
i have a huge task to do and i need your help.I am new to the whole networking world and I apologize if this is a re-post of a question.
so what i wanted is to discover and mapping all my enterprise ...
1
vote
1answer
282 views
How do packets flow in a Fortigate HA cluster during fail-over?
How does a Fortigate unit in HA cluster prevent a switch from sending packets to the failed unit ?
1
vote
1answer
64 views
Fortigate 10 GE uplink
Can i change the speed of the uplink ports on fortigate 600D from 10Ge to GE?
i have core switch alcatel with GE ports need to be integrated with FW 600D
1
vote
2answers
6k views
IPSec site to site VPN Fortigate
We have a site to site VPN connection to a branch office. Once in a while the connection drops for some reason and then we receive an error like this on the Fortigate 310b
ike Negotiate ISAKMP SA ...
1
vote
1answer
497 views
Egress traffic shaping vs. normal output interface queue
When traffic needs to egress from an interface, it is put to an output queue.
When a traffic shaper is shaping egress traffic going out of an interface, it puts the traffic in an output queue also.
...
1
vote
2answers
3k views
Why traffic shape/police ingress traffic?
Pardon me for my ignorance. I have not tried QoS nor traffic shaping/policing before.
I have been pondering on whether can/why would we want to shape/police ingress traffic if you have no control ...
1
vote
2answers
1k views
Fortigate VRRP or HA config
I have 2xFG 600D for redundancy setup, where to use VRRP and HA configuration? which one is optimal for Nat mode ?
0
votes
1answer
405 views
TCP session established even if the server isn't listening on particular port
I have found out a strange behaviour when trying to establish TCP session between Citrix host and back-end server on port 5060. When I perform 'telent 172.18.52.73 5060' from Citrix host I get "...
6
votes
2answers
3k views
Fortigate 100D internet on VLAN wan port
I am fairly new towards Fortigate firewalls and I am trying to set up one FortiGate 100D running firmware v5.0 as a router for a hotel network. I have 2 ISPs using PPPoE connection that runs on VLAN ...
1
vote
1answer
531 views
Synchronization of Fortigate Cluster on VMware
I want to create a Fortigate cluster with two Fortigate running the same frimware version.
Each Fortigate has its own license, so each one has its serial number.
I have configured HA links by ...
1
vote
1answer
165 views
Can a fortigate firewall know which device tried to access its restricted url?
In my network, a specific url is being blocked by fortiguard firewall. Now I want to know which all devices had tried to access that blocked url. I traced the mac address inside the packet. But how ...
1
vote
2answers
2k views
How to create separate network on different interfaces on Fortinet 200d and route bettwen them?
Fortinet 200d has 8 internal (LAN) interfaces, but there is no way in the GUI to modify specific interface. For example: int1 of int2 on int3. They are all under one internal LAN interface. So, how ...
