Questions tagged [fortigate]

For questions about Fortigate, the UTM product line from Fortinet

Filter by
Sorted by
Tagged with
0
votes
3answers
265 views

Two 100mb ports on different networks on FortiGate 110C

If you allow me I have a quite far fetched question... I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate. Therefore I cant have 200mb/s ...
0
votes
1answer
34 views

Connect AP to Fortinet

I'm very new to Firewalls. Internet to my servers goes through a Fortinet Firewall. I wanted to add a wifi connection for other users as well, so I connected a NetGear Router as Access Point and gets ...
0
votes
1answer
931 views

Fortigate and ipv6 routing

I have a Fortigate router and my ISP support ipv6. I'm getting a public ipv6 on the Fortigate and also on the computers on the lan (2a02:a18:9041....) I have not to much understanding of ipv6, but by ...
1
vote
1answer
76 views

Fortigate 100E user names in syslog

I am monitoring the traffic from a Fortinet Fortigate 100E firewall and I am seeing the user name of a former employee whose local and domain accounts were deleted. I can't ask Fortinet support ...
1
vote
1answer
350 views

FortiGate & FortiAuthenticator - Mapping users to Groups for VPN using Radius

I need help from you guys since I can't find anything wrong with my setup and it still doesn't work: I authenticate my Fortigate SSLVPN users against FortiAuthenticator. I want to map some users to a ...
1
vote
1answer
122 views

Fortigate VPN Site to Multi Site

I have 4 sites running ipsec vpn on a fortigate 30E as below: Site A (HQ) Site B (Branch1) Site C (Branch2) Site D (Branch3) The connection is made from branches (B,C,D) to HQ (A) and is working ...
2
votes
1answer
337 views

I can't ping the gateway IP (fe80::1) from the internal port in my fortigate 60f firewall

I am using a fortigate 60f firewall. I have configured it for both ipv4 and ipv6. I have used the SD wan (by adding wan1 and wan2) for load-balancing. Moreover, I have configure a default static route ...
0
votes
1answer
3k views

Unable to ping Google-AWS Fortigate firewall-SOLVED

Followed this guide: https://cookbook.fortinet.com/create-routing-table-associate-subnets/ I have EC2 windows instance, also have EC2 FortiGate-FortiGate VM64-AWSONDEMAND . Fortigate has 2 NIC: 192....
4
votes
4answers
4k views

How to check the ifIndex on a Fortigate 1500D?

What is the exact command to check the port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate? The command diagnose sys device list root displays the index which isn't ...
0
votes
3answers
991 views

How can i find which cisco switch port is connnected to specific port of Fortigate?

there is any way to find that which switch port connected to mgmt port of fortigate? for example can i enable lldp on Cisco switch and Fortigate together? Fortigate 1500D (version 5.6.2) and switch is ...
1
vote
2answers
12k views

IPSec site to site VPN Fortigate

We have a site to site VPN connection to a branch office. Once in a while the connection drops for some reason and then we receive an error like this on the Fortigate 310b ike Negotiate ISAKMP SA ...
1
vote
3answers
29k views

FortiGate HA (A/A) Cluster: How can I manage the slave unit from the web GUI?

I am confused to what happened to the slave's IP address. Before I set both my units to Active/Active cluster, I could reach each of them with their own IP. Now, I can still reach the master unit with ...
1
vote
3answers
3k views

How to create separate network on different interfaces on Fortinet 200d and route bettwen them?

Fortinet 200d has 8 internal (LAN) interfaces, but there is no way in the GUI to modify specific interface. For example: int1 of int2 on int3. They are all under one internal LAN interface. So, how ...
0
votes
2answers
550 views

Do I have to reboot the Fortigate 1000c after modification on static route?

I am using a Fortigate 1000c working on NAT mode. It has two WAN connections (WAN1 and WAN2). I am using a static route. For some reasons, There are many firewalls and routers (Cisco, TP-Link and so.....
1
vote
2answers
987 views

Fortigate 300C : Web-Filter not working

I have fortigate 300C firewall. I have create the web-filter policy for one department, I have added only websites which are allowed (around 1200 websites) rest all I want to block. But somehow ...
3
votes
3answers
890 views

Fortigate user traffic quota

I'm trying to limit internet users by traffic quota in fortigate firewall.Is there a way to limit users traffic usage and set quota for them in fortigate? i think there is no built-in feature for ...
3
votes
3answers
1k views

Direction incoming vs outgoing in logs

I'm trying to understand some Fortinet firewall logs but I'm not sure I fully understand what is being logged by the firewall when it comes to direction (Incoming vs Outgoing) For example: srcip=7.7....
0
votes
2answers
601 views

In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall. I saw the some ...
3
votes
2answers
526 views

Cisco SG300 and Fortigate 90D integration

I need help in setting up my network, currently I have the following setup. All the computers can browse the internet but when I tried to create a two groups (a group that can access the internet and ...
2
votes
1answer
497 views

Can a QSFP28 port break out to 4 SFP+ ports to separate hosts?

I apologize in advance because I suspect this is already covered. I've read some of the posts and I suspect the answer is "it depends on the vendors involved" or just "no". I'm ...
7
votes
2answers
10k views

Source NATing Fortigate typical scenario

I have a small query with respect to NATing in Fortigate.I'm struck in particular by a scenario where the remote network allows users with a specific IP range with a specific port for RDP over a ...
1
vote
2answers
421 views

NAT Problem Fortigate 501e v6.0

I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
8
votes
3answers
26k views

Policy routing configuration in Fortigate

I have an scenario where a Fortigate firewall is used to separate internal networks from the Internet (FortiOS Version 4.0 MR3 patch 11). Right now there is a single Internet connection attached to ...
3
votes
3answers
5k views

Fortigate: enabling directed broadcast to broadcast conversion on last hop?

I'm not quite certain how to achieve the equivalent of ip directed broadcast with a FortiGate. In this case a FortiGate 60E with FortiOS 5.6.7. So I started to dig a little. QUESTION: Can anyone ...
2
votes
3answers
915 views

Multiple url filter list in fortigate

is this possible to use multiple urlfilter lists in web filtering on fortigate? I need to block specified sites for one user group and other sites for another user group but it looks like there is ...
0
votes
2answers
561 views

Switch to secondary firewall when WAN interface goes down

We are having two firewalls A and B. The model is FortiGate 60E. Both are running in HA where A is primary and B is secondary. The firewalls are running smoothly and traffic is flowing from the WAN ...
0
votes
0answers
53 views

read traffic/bandwidth usage by protocol

I need to analyze the traffic of a Fortigate Firewall in my program. Currently, I can read the overall traffic using SNMP. The problem is that I need to analyze the type of traffic (HTTP, video ...
5
votes
2answers
19k views

Fortigate: HTTP/HTTPS Traffic Connections Timeout

I'm having an oddball issue with HTTP/HTTPS traffic through my FG-100A running 4 MR3 Patch 18. The basic architecture is Internet<->Modem<->FG-100A<->Switch+WAP<->Clients. The switch is ...
0
votes
1answer
421 views

FortiOS 5.2.11 SSLVPN Split Tunneling route FQDN [closed]

Is there anyone who has the experience to configure FortiGate SSL VPN split-tunneling to route FQDN object? What I am trying to do is we need to access some websites that can only use our office WAN ...
1
vote
1answer
1k views

2FA Setup for FortiGate SSL VPN

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
1
vote
1answer
40 views

User Upload Quota Fortigate - 501E (6.2.1)

Im using a Fortigate 501E. my requirement is: Every user can’t upload more than 1 GB per day. is it possible to implement the above requirement. Thanks
1
vote
1answer
1k views

Command to get full configuration in Fortianalyzer

Could anyone please tell me how to get the full configuration info in Fortianalyzer ver 6.0.6. I’m an entry level of a network engineer. It would be nice if you can help me with simple English. ...
0
votes
3answers
124 views

Enrutar Vlans en FortiGate 80E

Good afternoon, I currently have a Fortigate 80E. which has 2 ports used, in port 1 comes vlan 4 and in port 2 enters vlan 2. But I can't find a way to route them to each other. If I create static ...
0
votes
1answer
593 views

Can CLI commands be run of a FortiGate from crontab?

I have a recurring occurance at 02:30 (2:30 AM) every night, where DNS name resolutions fail. I'd like to run the following CLI commands on our FortiGate 60D at 02:20, so I'll have some data to debug ...
0
votes
0answers
5k views

Error on Fortigate SSL when connecting to CIFS file server

I am having trouble connecting to a Windows file server via Fortigate SSL. I enter the host name of my file server in Connection Tool section of my SSL portal and then a window asking for log in ...
1
vote
1answer
1k views

Dropping packets between router and firewall without firewall rule

I have a user that is trying to access his company network resources on his home network. He is able to access SMB shares and other resources, but he is unable to access their AS400 on any computer in ...
2
votes
1answer
453 views

Fortigate 800C is not displaying the data for IDS/sniffer traffic on Log&Report

I have a Fortigate 800C in Flow based inspection and configured one-arm sniffer mode on an interface and configured a firewall sniffer with below config config firewall sniffer set ips-sensore-...
1
vote
1answer
139 views

Unable to Ping Past Firewall

I am trying to get communication across a firewall, but I am unable to ping anything past the firewall. PC1:172.16.201.22 <-> Router:172.16.192.1 <-> Firewall_Port1:10.10.10.4 <-> ...
2
votes
1answer
3k views

MAC Address Filtering Fortinet v6.0

I am having trouble configuring mac filtering. I do not use DHCP but am trying to figure out a way to set a mac address on a port and create a rule to block that specific mac address. So when I try ...
2
votes
1answer
60 views

Stopping logging info from interrupting CLI session?

With cisco devices the logging synchronous command will stop logging output from interrupting the the CLI session. Is there an equivalent command for the fortigate firewalls? i.e. When running a debug ...
1
vote
2answers
1k views

Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working

Client -> VPN -> FG1 -> FG2 -> Server Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32 on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6 ...
0
votes
1answer
3k views

FortiGate 100A with VLAN on WAN port

I am trying to set up my old FortiGate 100A as a simple router for a small office network. My ISP's incoming PPPoE connection runs on VLAN 100 and I can't seem to get it going on a WAN port of the ...
2
votes
1answer
153 views

Cannot Ping Firewall After Changing SFP

I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...
0
votes
1answer
339 views

Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]

Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
2
votes
1answer
485 views

Fortigate - Redirecting subdomains only?

I'm trying to figure out a way to have our Fortigate 60C redirect certain subdomains but not block complete access to the domain. E.G. I want to block update.microsoft.com but I don't want microsoft....
1
vote
1answer
578 views

IP is getting through from firewall although it was in Banned List

I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
0
votes
1answer
109 views

Setting up Hardware for HA

After designing this I went in to start configuring equipment and quickly realized I was missing alot of information/understanding. So the switches (A) between the modem and routers, do they need to ...
2
votes
1answer
5k views

How to rename an existing FortiGate VDOM

I need to rename an existing Fortigate 100D VDOM. I cannot find the command unless it's really counter-intuitive. Furthermore, if this is not possible, can I copy the existing VDOM to a new one with ...
0
votes
4answers
21k views

Unblocking of skype in Fortigate

I have fortinet fortigate 40c. It is not a bundle product. We use it to unblock 300 of our websites and rest are all blocked by default. Now, we want to unblock skype. The problem is just specifying ...
1
vote
1answer
4k views

How to check last executed commands by users at FortiGate

How to check last executed commands by users at FortiGate firewall like show cli history at SRX firewall