Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [fortigate]

For questions about Fortigate, the UTM product line from Fortinet

Filter by
Sorted by
Tagged with
-1 votes
0 answers
16 views

[ANSIBLE][FORTIGATE] Error in repo - fortios_log_webtrends_filter

I am having trouble using ansible on fortigate. In fact, I am writing a playbook to filter urls through categories. To do that i use the module fortinet.fortios.fortios_lo_webtrends_filter. This is my ...
Pierre C's user avatar
0 votes
1 answer
29 views

Forward log events to syslog through Fortianalyzer

I'm trying to send my logs from fortianalyzer to graylog, i've set up logforwarding to syslog and i can see some logs that look like this on graylog <190>logver=702071577 timestamp=1714736929 ...
Hanaa Alaoui Belghiti's user avatar
0 votes
1 answer
32 views

Puppet on Forti os, Is it possible?

I basicaly wanted to know if it is possible to download and configure puppet-client on a fortigate to be able to push configuration manifests from the puppet-server ? I already know that some tools ...
Pierre C's user avatar
1 vote
1 answer
64 views

My Fortinet Firewall shows 100Mbps (100%) bandwidth usage in the BD dashboard but Fortiview sources do not show much usage. Facing connectivity issue!

I am working with a Fortinet FG-60F firewall. It has 2 WAN sources and both have a maximum link speed of 100Mbps. Throughout the day, I am repeatedly getting downstream bandwidth spikes of 100Mbps+ on ...
WishIWasACoder's user avatar
0 votes
0 answers
71 views

Zabbix with Fortimanager

I am seeking assistance with configuring Zabbix to monitor FortiGates that are managed by FortiManager. Despite configuring FortiManager with SNMP and adding a host for it in Zabbix, I am not seeing ...
Hanaa Alaoui Belghiti's user avatar
0 votes
1 answer
91 views

Problem with Configuring Selective DNAT for HTTP Traffic on Fortigate Firewall

I'm currently in the process of setting up a new Fortigate Firewall and have run into an issue while configuring DNAT. From what I understand, this is done through Virtual IPs in Fortigate. My goal is ...
Mischa-H's user avatar
1 vote
1 answer
109 views

Iperf testing- Slow transfer speeds [closed]

I'm doing Iperf testing at my company's branch office circuit and I'm getting results that are causing me concern. I'm testing from a laptop through an access switch>distro switch> Fortigate> ...
Network Engineer Sussman's user avatar
0 votes
0 answers
75 views

Clarification of external interface vs source interface filter in Fortigate DNAT/VIP

On a Fortigate firewall, one can configure Destination NAT using the DNAT & Virtual IPs section of the GUI, or the config firewall vip section of the CLI. When you create a DNAT object using ...
jimbobmcgee's user avatar
0 votes
0 answers
70 views

junos 802.1ad on EX and MX

given following szenario: I have a Juniper MX204 Service router, a FGT200F Cluster is connected via a EX4400 Switch Stack. ------------ ---------- --------- | FGT-200F | --- | EX4400 | --- | ...
Andreas Schaefer's user avatar
1 vote
2 answers
278 views

The authentication page for Fortinet access is not secure

When attempting to access my Fortinet firewall by entering its address in the web page's URL, I encounter a warning. How can I authorize its address or, perhaps, its SSL certificate to prevent the ...
Asma B's user avatar
  • 51
0 votes
2 answers
178 views

Setting FortiGate HA Firewall

I need some advice and guidance regarding setting up the FortiGate HA, My question is focused on WAN side of configuration (not A WAN expert), below are highlight environment 2 ISP WAN-A / WAN-B ...
KurdTech's user avatar
0 votes
2 answers
137 views

Configuring connectivity between device on LAN to WAN on Fortigate 80e

Good day all, I am running into some trouble trying to get a device behind a fortigate 80e on the LAN to talk to a device on the WAN at one of our remote sites Background MQTT Device: 192.168.10.240 ...
cnrdvdsmt's user avatar
0 votes
0 answers
1k views

Fortigate SD-WAN Performance SLA and static route updates, can the network still ping the WAN gateways when the route is down?

I'm using a Fortigate in order to load balance and have redundent internet acces for a remote site. Going there is painful as it involves taking a boat and go to a remote but inhabited island. The SD-...
user1892410's user avatar
1 vote
2 answers
350 views

ISP connected to the Fortiswitches behind the Fortigates

I have a scenario in a client that a couple of ISPs directly connect to the fortiswitches behind the fortigates firewalls instead of connecting to the fortigates or any switches before the fortigate ...
Rich's user avatar
  • 113
1 vote
0 answers
1k views

Cannot access to Fortigate FW through mgmt port after forming HA

The two FW are Fortigate WiFi 60E, OS v7.2.0 build1157. The HA connection on the two FortiWifi60E was like PC1-----Fortigate FW1-----Fortigate FW2-----PC2 PC1 IP:192.168.1.100 PC1 default gateway:192....
jacky chong's user avatar
1 vote
1 answer
625 views

How do you redirect Fortigate packet sniffer CLI output to a log file?

I want to run the fortigate packet sniffer: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-the-FortiOS-built-in-packet-sniffer/ta-p/194222 and when I do so, I only get CLI ...
Ryu S.'s user avatar
  • 123
1 vote
2 answers
838 views

how does OSPF work with different subnets and is it slower?

I'm having the following topology: [router A] port1===port1 [router B] port2===port2 [router C] subnet 1 on router A and B via port1 subnet 2 on router B and C via port2 Now all routers are in area 0,...
BlackFlag's user avatar
0 votes
2 answers
895 views

Capture switched traffic on fortigate

I have a fortigate 40F with an lan1 to lan4 configured as an hardware switch (lan). I would like to capture switched traffic between hosts, even if it's not in the same IP subnet than the lan ...
Golgot's user avatar
  • 427
1 vote
1 answer
788 views

FSSO Collector agent shows old logs

Troubleshooting serious issue with FSSO - Users not getting access to internet because the primary FSSO agent fails to receive those user log on events. Out of 3 agents configured (2 in DC1 and 1 in ...
Sivagami N's user avatar
2 votes
1 answer
233 views

Is an ICMPv6 neighbor advertisement meaningful if no options are set?

This is what I think a normal ICMPv6 neighbor advertisement should look like: It says "I'm 2001:57a:d000::54 and you can reach me at 02:02:53:85:21:25". This is what neighbor advertisements ...
9072997's user avatar
  • 123
2 votes
2 answers
2k views

FortiGate: IPSec peer-to-peer and two remote peers

I have a FortiGate firewall in the main office and some branches with Cisco ASA. An IPsec tunnel runs between the main office and each branch. Some branches have two ISP - main and reserve. For ...
Ruslan's user avatar
  • 155
0 votes
1 answer
406 views

FortiGate 100E update through SquidProxy

I need to update a backend Fortinet FortiGate100E firewall and the only machine in the network whose ip address is authorized for internet access (from the frontend firewall) is 10.1.2.3 running ...
mfloris's user avatar
  • 195
0 votes
1 answer
726 views

Connect AP to Fortinet

I'm very new to Firewalls. Internet to my servers goes through a Fortinet Firewall. I wanted to add a wifi connection for other users as well, so I connected a NetGear Router as Access Point and gets ...
adel sameer's user avatar
2 votes
1 answer
668 views

Fortigate 100E user names in syslog

I am monitoring the traffic from a Fortinet Fortigate 100E firewall and I am seeing the user name of a former employee whose local and domain accounts were deleted. I can't ask Fortinet support ...
mfloris's user avatar
  • 195
1 vote
1 answer
1k views

Fortigate VPN Site to Multi Site

I have 4 sites running ipsec vpn on a fortigate 30E as below: Site A (HQ) Site B (Branch1) Site C (Branch2) Site D (Branch3) The connection is made from branches (B,C,D) to HQ (A) and is working ...
user78193's user avatar
3 votes
1 answer
2k views

I can't ping the gateway IP (fe80::1) from the internal port in my fortigate 60f firewall

I am using a fortigate 60f firewall. I have configured it for both ipv4 and ipv6. I have used the SD wan (by adding wan1 and wan2) for load-balancing. Moreover, I have configure a default static route ...
Ecstasy Entertainment's user avatar
1 vote
1 answer
1k views

FortiGate & FortiAuthenticator - Mapping users to Groups for VPN using Radius

I need help from you guys since I can't find anything wrong with my setup and it still doesn't work: I authenticate my Fortigate SSLVPN users against FortiAuthenticator. I want to map some users to a ...
Hamdi Kadri's user avatar
2 votes
1 answer
1k views

Can a QSFP28 port break out to 4 SFP+ ports to separate hosts?

I apologize in advance because I suspect this is already covered. I've read some of the posts and I suspect the answer is "it depends on the vendors involved" or just "no". I'm ...
William Jens's user avatar
0 votes
0 answers
174 views

read traffic/bandwidth usage by protocol

I need to analyze the traffic of a Fortigate Firewall in my program. Currently, I can read the overall traffic using SNMP. The problem is that I need to analyze the type of traffic (HTTP, video ...
dan1st's user avatar
  • 101
0 votes
1 answer
1k views

FortiOS 5.2.11 SSLVPN Split Tunneling route FQDN [closed]

Is there anyone who has the experience to configure FortiGate SSL VPN split-tunneling to route FQDN object? What I am trying to do is we need to access some websites that can only use our office WAN ...
beelee6973's user avatar
1 vote
2 answers
1k views

2FA Setup for FortiGate SSL VPN

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
jrdvtech's user avatar
0 votes
3 answers
516 views

Two 100mb ports on different networks on FortiGate 110C

If you allow me I have a quite far fetched question... I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate. Therefore I cant have 200mb/s ...
FcoLG's user avatar
  • 1
1 vote
1 answer
55 views

User Upload Quota Fortigate - 501E (6.2.1)

Im using a Fortigate 501E. my requirement is: Every user can’t upload more than 1 GB per day. is it possible to implement the above requirement. Thanks
MMDF's user avatar
  • 13
0 votes
2 answers
2k views

Switch to secondary firewall when WAN interface goes down

We are having two firewalls A and B. The model is FortiGate 60E. Both are running in HA where A is primary and B is secondary. The firewalls are running smoothly and traffic is flowing from the WAN ...
Rishi Agrawal's user avatar
0 votes
1 answer
2k views

Fortigate and ipv6 routing

I have a Fortigate router and my ISP support ipv6. I'm getting a public ipv6 on the Fortigate and also on the computers on the lan (2a02:a18:9041....) I have not to much understanding of ipv6, but by ...
Mr Zach's user avatar
  • 113
0 votes
3 answers
2k views

How can i find which cisco switch port is connnected to specific port of Fortigate?

there is any way to find that which switch port connected to mgmt port of fortigate? for example can i enable lldp on Cisco switch and Fortigate together? Fortigate 1500D (version 5.6.2) and switch is ...
Behzad Soltaniyan's user avatar
0 votes
3 answers
158 views

Enrutar Vlans en FortiGate 80E

Good afternoon, I currently have a Fortigate 80E. which has 2 ports used, in port 1 comes vlan 4 and in port 2 enters vlan 2. But I can't find a way to route them to each other. If I create static ...
Ignacio Copparoni's user avatar
1 vote
1 answer
3k views

Command to get full configuration in Fortianalyzer

Could anyone please tell me how to get the full configuration info in Fortianalyzer ver 6.0.6. I’m an entry level of a network engineer. It would be nice if you can help me with simple English. ...
Chie's user avatar
  • 11
0 votes
1 answer
862 views

Can CLI commands be run of a FortiGate from crontab?

I have a recurring occurance at 02:30 (2:30 AM) every night, where DNS name resolutions fail. I'd like to run the following CLI commands on our FortiGate 60D at 02:20, so I'll have some data to debug ...
boardrider's user avatar
1 vote
1 answer
2k views

Dropping packets between router and firewall without firewall rule

I have a user that is trying to access his company network resources on his home network. He is able to access SMB shares and other resources, but he is unable to access their AS400 on any computer in ...
Josh Eblin's user avatar
2 votes
1 answer
612 views

Fortigate 800C is not displaying the data for IDS/sniffer traffic on Log&Report

I have a Fortigate 800C in Flow based inspection and configured one-arm sniffer mode on an interface and configured a firewall sniffer with below config config firewall sniffer set ips-sensore-...
aparna's user avatar
  • 21
1 vote
2 answers
539 views

NAT Problem Fortigate 501e v6.0

I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
user56946's user avatar
3 votes
3 answers
10k views

Fortigate: enabling directed broadcast to broadcast conversion on last hop?

I'm not quite certain how to achieve the equivalent of ip directed broadcast with a FortiGate. In this case a FortiGate 60E with FortiOS 5.6.7. So I started to dig a little. QUESTION: Can anyone ...
Marc 'netztier' Luethi's user avatar
2 votes
1 answer
4k views

MAC Address Filtering Fortinet v6.0

I am having trouble configuring mac filtering. I do not use DHCP but am trying to figure out a way to set a mac address on a port and create a rule to block that specific mac address. So when I try ...
user56946's user avatar
1 vote
1 answer
218 views

Unable to Ping Past Firewall

I am trying to get communication across a firewall, but I am unable to ping anything past the firewall. PC1:172.16.201.22 <-> Router:172.16.192.1 <-> Firewall_Port1:10.10.10.4 <-> ...
d5343's user avatar
  • 43
2 votes
1 answer
224 views

Stopping logging info from interrupting CLI session?

With cisco devices the logging synchronous command will stop logging output from interrupting the the CLI session. Is there an equivalent command for the fortigate firewalls? i.e. When running a debug ...
Nickb033's user avatar
1 vote
2 answers
2k views

Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working

Client -> VPN -> FG1 -> FG2 -> Server Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32 on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6 ...
danish's user avatar
  • 141
2 votes
1 answer
356 views

Cannot Ping Firewall After Changing SFP

I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...
d5343's user avatar
  • 43
0 votes
1 answer
434 views

Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]

Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
joe's user avatar
  • 103
0 votes
2 answers
975 views

In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall. I saw the some ...
Govind Choudhary's user avatar