Questions tagged [fortigate]

For questions about Fortigate, the UTM product line from Fortinet

Filter by
Sorted by
Tagged with
0
votes
1answer
441 views

TCP session established even if the server isn't listening on particular port

I have found out a strange behaviour when trying to establish TCP session between Citrix host and back-end server on port 5060. When I perform 'telent 172.18.52.73 5060' from Citrix host I get "...
6
votes
2answers
4k views

Fortigate 100D internet on VLAN wan port

I am fairly new towards Fortigate firewalls and I am trying to set up one FortiGate 100D running firmware v5.0 as a router for a hotel network. I have 2 ISPs using PPPoE connection that runs on VLAN ...
1
vote
1answer
588 views

Synchronization of Fortigate Cluster on VMware

I want to create a Fortigate cluster with two Fortigate running the same frimware version. Each Fortigate has its own license, so each one has its serial number. I have configured HA links by ...
1
vote
1answer
176 views

Can a fortigate firewall know which device tried to access its restricted url?

In my network, a specific url is being blocked by fortiguard firewall. Now I want to know which all devices had tried to access that blocked url. I traced the mac address inside the packet. But how ...
1
vote
2answers
2k views

How to create separate network on different interfaces on Fortinet 200d and route bettwen them?

Fortinet 200d has 8 internal (LAN) interfaces, but there is no way in the GUI to modify specific interface. For example: int1 of int2 on int3. They are all under one internal LAN interface. So, how ...
1
vote
1answer
8k views

Fortinet 200D: how to implement VLAN, inter-VLAN routing, and DHCP relay?

Here are the steps I configured so far: General configuration steps The following steps provide an overview of configuring and testing the hardware used in this example. For best results in ...
1
vote
2answers
617 views

tidy up the IP addresses on fortigate 90d

I have a doubt. IP addresses of the PCs connected to this network do not seem to change every time they connect to the network. I should tidy up the IP addresses, respecting the physical layout of the ...
1
vote
0answers
74 views

What is wrong with my Fortigate LNS IP scheme configuration?

I'm trying to set up a VPN connection for a client-to-site scheme with a fortigate VM applicance. This is for testing puropose so all clients and the fortigate are runned on VMWare. Here is what I ...
1
vote
1answer
2k views

Fortigate Firewall cli query || show and get

which type information can be seen by executing keywords "GET" and "SHOW" with combination other keywords at Fortigate firewall cli in general way. Can anyone differentiate the information print by ...
1
vote
1answer
5k views

NAT port is exhausted

I have fortigate 300C, since today morning I am getting error NAT port is exhausted and also I observed high bandwidth consumption due to which links were getting flapped. I have search on google but ...
1
vote
1answer
232 views

Abnormally Bandwidth utilization goes high what should I do

We have 20 MBPS Internet lease line, suddnly my bandwidth utilization reached peak that causes slowness of internet. I am not able to trace whether the problem is and what should I do? Please assist ...
1
vote
2answers
111 views

Fortigate 3800 and Juniper QFX 5200 40G connectivity

We are planning to put a Juniper QFX 5200 series switch which has 40G QSFP+ ports in front of the firewall which has QSFP+ 40G ports. They should work well with the 3800 Firewall's QSFP+ 40G port ...
2
votes
1answer
2k views

Connecting to fortigate 5.4 with vpnc (ipsec)

I have a fortigate 90b(?) running 5.4. wan1 is set to a publically accessible address. Our internal network is 192.168.100.0 I can connect via ipsec and I can access the gateway, which is the ...
3
votes
1answer
4k views

How to prevent loop while trunking Fortigate and Cisco L2 Switches

I have inherited a rather weird setup at work, although my forte is servers and cloud, I have to look into network matters as well due to lack of resources. This setup has 2 x Fortigate 100Ds (FG1, ...
0
votes
1answer
2k views

FortiGate 100A with VLAN on WAN port

I am trying to set up my old FortiGate 100A as a simple router for a small office network. My ISP's incoming PPPoE connection runs on VLAN 100 and I can't seem to get it going on a WAN port of the ...
1
vote
1answer
909 views

Fortigate 300C : Web-Filter not working

I have fortigate 300C firewall. I have create the web-filter policy for one department, I have added only websites which are allowed (around 1200 websites) rest all I want to block. But somehow ...
1
vote
1answer
3k views

Internal mapped IP of other LAN segment (fortigate)

I have two LANs LAN 1 - 192.168.250.0/24 LAN 2 - 192.168.21.0/24 There is a way to use static NAT to map an IP like 192.168.21.1 to a IP of LAN1 like 192.168.250.1? The is critical to access some ...
1
vote
1answer
977 views

Is there anyway to set Quota for users in Fortigate?

someone told me that there is a solution for setting Quota in New FortiOS (v5.4), but i can't find anything to do that. i just want to know, is there anyway to set Quota for my local internet users, ...
1
vote
1answer
628 views

Fortigate - Routing DSCP tagged packets through different WAN connections

I have 3 WAN connections and a remote site with a single WAN address. What I'd like to do is monitor the latency towards the remote site using a single machine (Opsview) on our LAN but through all 3 ...
0
votes
4answers
20k views

Unblocking of skype in Fortigate

I have fortinet fortigate 40c. It is not a bundle product. We use it to unblock 300 of our websites and rest are all blocked by default. Now, we want to unblock skype. The problem is just specifying ...
0
votes
1answer
1k views

I have forgate 60c firewall i want to block fb andyoutube in my network in some specific Ip Range , please informe me full process?

I have forgate 60c firewall i want to block fb and youtube in my network in some specific Ip Range , please informe me full process?
2
votes
3answers
5k views

GRE over IPsec between Juniper SRX100 and Fortigate 100D

I need assistance configuring VPN setup between Fortigate and Juniper devices (GRE over IPSec). I have the topology as follows: What I need to do is create a route-based IPSec tunnel between the ...
1
vote
2answers
24k views

FortiGate HA (A/A) Cluster: How can I manage the slave unit from the web GUI?

I am confused to what happened to the slave's IP address. Before I set both my units to Active/Active cluster, I could reach each of them with their own IP. Now, I can still reach the master unit with ...
0
votes
2answers
3k views

FortiGate Site-to-Site VPN with Client VPN

I've got a bit of a problem. I have 2 Sites. HQ and Branch both are connected via a site-to-site VPN (IPsec). HQ.: 192.168.10.x/24 Branch.: 192.168.25.x/24 If I am in the HQ building and in the 192....
1
vote
1answer
146 views

Viewing results immediately after applying CLI config ForitOS 5.4 200D

Just upgraded to FortiOS 5.4, don't really think that makes a difference here but I don't see my CLI config changes from the GUI. Lets say I edit a firewall policy via CLI then refresh my GUI window, ...
0
votes
1answer
1k views

Access FortiClients from LAN

I have a FortiGate 90D (v5.2.5) that I have an IPSec VPN configured for FortiClient access via the VPN Wizard. My LAN and FortiClients are using different subnets. I can access my LAN from my ...
2
votes
1answer
5k views

Fortigate “remembers” bad routes

I'm fairly new to Fortinet devices, so please let me know if I'm making a rookie mistake. I have a FortiGate 90D (v5.2.5,build701) which has an IPSec site-to-site VPN connection to another firewall ...
2
votes
1answer
4k views

Printer on wired LAN not accessible from wifi in a differnet subnet

My network diagram is as follows: The printer on the 2-network responds to pings from the 3-wifi-network for sometime and then just drops out for some reason i can’t figure out. I have policies on ...
1
vote
1answer
22k views

How do I reset a Fortigate firewall password without resetting the firewall [closed]

I am new to IT, and I want to login to a Fortigate 60D firewall, but I don't know the password. How do I reset the firewall password without resetting the firewall.
2
votes
1answer
414 views

Fortigate - Redirecting subdomains only?

I'm trying to figure out a way to have our Fortigate 60C redirect certain subdomains but not block complete access to the domain. E.G. I want to block update.microsoft.com but I don't want microsoft....
2
votes
1answer
4k views

How to rename an existing FortiGate VDOM

I need to rename an existing Fortigate 100D VDOM. I cannot find the command unless it's really counter-intuitive. Furthermore, if this is not possible, can I copy the existing VDOM to a new one with ...
3
votes
1answer
594 views

Need help to identify UTM/Firewall for SME network

I am planning to procure a UTM/Firewall device for our office network of 50 Nodes (can be increased upto 75). I want a comprehensive solution for optimum ISP bandwidth utilization, corporate content ...
1
vote
0answers
126 views

What were the effective ways to test my firewall [closed]

Myself testing my internal firewall from external network,What were the effective ways of testing my firewall and ensuring that it secure The methods which i tried were launching a stealth scan with ...
4
votes
1answer
4k views

Fortigate 30D IPSEC VPN could not locate phase1 configuration

Hello network engineers, I have an IPSEC VPN tunnel between two offices, the HQ is a fortigate 200B(os:v5.0,build0292 (GA Patch 9)) and the branch is fortigate 30D(os:5.2.3). Both are now on static ...
5
votes
2answers
18k views

Fortigate: HTTP/HTTPS Traffic Connections Timeout

I'm having an oddball issue with HTTP/HTTPS traffic through my FG-100A running 4 MR3 Patch 18. The basic architecture is Internet<->Modem<->FG-100A<->Switch+WAP<->Clients. The switch is ...
0
votes
2answers
6k views

How to setup HA on FortiGate VM?

i have setup 2 VM's on ESXi with FortiGateVM100, and trying to setup HA cluster on it. I connected 2 fortis interfaces to same port-groups (same vlans). Then i entered same ha group-name, same ...
2
votes
1answer
2k views

Dedicated SBC really required for SIP trunking through a FortiGate 200B firewall?

I work at a school with a mid-sized ShoreTel deployment; two ShoreGear T1 trunk units and 15 ShoreGear 120/24 switches. We have a couple hundred IP phones and a couple hundred analog extensions (dorms)...
0
votes
0answers
4k views

Error on Fortigate SSL when connecting to CIFS file server

I am having trouble connecting to a Windows file server via Fortigate SSL. I enter the host name of my file server in Connection Tool section of my SSL portal and then a window asking for log in ...
7
votes
2answers
10k views

Source NATing Fortigate typical scenario

I have a small query with respect to NATing in Fortigate.I'm struck in particular by a scenario where the remote network allows users with a specific IP range with a specific port for RDP over a ...
3
votes
2answers
836 views

Fortigate user traffic quota

I'm trying to limit internet users by traffic quota in fortigate firewall.Is there a way to limit users traffic usage and set quota for them in fortigate? i think there is no built-in feature for ...
3
votes
2answers
1k views

where to NAT?where to run BGP?

in this diagram : we are peering with 2 ISPs, let's say I have a class c IP space like 200.200.200.0/24 and let's say my ASN is 65000, the thing is where should I run NAT? on which device? I mean on ...
2
votes
3answers
27k views

How to disable unused LAN ports on Fortigate

I know I can set the administrative status of WAN/DMZ ports to down to disable them, but I can only see how to set the entire internal interface up/down. Is there a way to set individual LAN ports ...
4
votes
2answers
6k views

Fortigate logging: how to prevent ping to firewall interface to be logged while still getting logs for implicitly denied traffic

Is there a way to configure a fortinet firewall (e.g, fortigate600 running FortiOS 5 or FortiOS 4) so it do not generate log entries for pings that are directed to the firewall's own interfaces but ...
1
vote
1answer
583 views

Routing from IPSec VPN1 to IPSec VPN2 through HQ

I have a few remote offices running Cisco 800 Routers and a HQ that is running a Fortigate 80D and an Azure Cloud enviroment that has a VPN Tunnel to the Fortigate. Now, I have setup IPSec VPN's ...
1
vote
1answer
100 views

Cisco ASA creating two identicial Tunnel IDs?

I'm not sure why this is happening, but I have a Cisco ASA peering with a Forigate to create VPN Site-to-Site Tunnel. The odd thing is I see this in ASDM, the Cisco ASA is creating two(2) identical ...
5
votes
1answer
13k views

Fortigate reverse path check fail

I have a Fortigate 1240B with a vlan interface with IP 172.22.0.27/16. When a host directly connected try to ping my IP, I got the messages below. id=36871 trace_id=2 func=resolve_ip_tuple_fast line=...
3
votes
1answer
7k views

Fortigate Open Ports

I need to open this port in Fortigate: 443 PSOM/TLS Outbound Data sharing sessions But i dont know where I can open. I created a Custom Service, chose the option of TCP, but do not know if ...
6
votes
1answer
5k views

VPN client to multiple locations simultaneously

I need to connect to 15+ locations to run network scans weekly. All the locations have Fortigate firewalls over which I have full control. The current solution I have is to connect via IPSec VPN to ...
2
votes
0answers
4k views

Fortigate PPTP default gateway configuration

I have a fortigate 40C running with a PPTP configuration. My VPN works partly. I can connect to the office network, however I can't get the default gateway working. Can anyone help me with figuring ...
4
votes
2answers
776 views

Is Fortigate-60D a fanless model?

I would like to know if Fortigate-60D is a fanless model or not. However, neither Fortigate-60D datasheet nor Fortinet Product Matrix provide any information about this topic. Could you please ...