Skip to main content

Questions tagged [fortinet]

Fortinet is a worldwide provider of network security appliances and a market leader in Network Security (FW/NGFW/UTM).

Filter by
Sorted by
Tagged with
0 votes
2 answers
65 views

Forward log events to syslog through Fortianalyzer

I'm trying to send my logs from fortianalyzer to graylog, i've set up logforwarding to syslog and i can see some logs that look like this on graylog <190>logver=702071577 timestamp=1714736929 ...
Hanaa Alaoui Belghiti's user avatar
0 votes
1 answer
36 views

Puppet on Forti os, Is it possible?

I basicaly wanted to know if it is possible to download and configure puppet-client on a fortigate to be able to push configuration manifests from the puppet-server ? I already know that some tools ...
Pierre C's user avatar
1 vote
1 answer
79 views

My Fortinet Firewall shows 100Mbps (100%) bandwidth usage in the BD dashboard but Fortiview sources do not show much usage. Facing connectivity issue!

I am working with a Fortinet FG-60F firewall. It has 2 WAN sources and both have a maximum link speed of 100Mbps. Throughout the day, I am repeatedly getting downstream bandwidth spikes of 100Mbps+ on ...
WishIWasACoder's user avatar
0 votes
0 answers
80 views

Zabbix with Fortimanager

I am seeking assistance with configuring Zabbix to monitor FortiGates that are managed by FortiManager. Despite configuring FortiManager with SNMP and adding a host for it in Zabbix, I am not seeing ...
Hanaa Alaoui Belghiti's user avatar
1 vote
2 answers
339 views

The authentication page for Fortinet access is not secure

When attempting to access my Fortinet firewall by entering its address in the web page's URL, I encounter a warning. How can I authorize its address or, perhaps, its SSL certificate to prevent the ...
Asma B's user avatar
  • 51
1 vote
1 answer
371 views

How can I view the bandwidth usage of a specific interface over a period of time on Fortinet without using a FortiAnalyzer instance?

My company utilizes a Fortinet firewall, but we currently do not have a FortiAnalyzer. We are seeking to obtain statistics on the usage of an internet interface's bandwidth, specifically over a 24-...
Asma B's user avatar
  • 51
4 votes
1 answer
205 views

What's the difference between the Three Families of Fortinet SPUs?

Why Fortinet name their CPU's like: NETWORK PROCESSOR 7 (NP7), CONTENT PROCESSOR 9 (CP9) and SECURITY PROCESSING UNIT (SP5). What's the difference between them?
Jonas Lucas's user avatar
0 votes
0 answers
1k views

Fortigate SD-WAN Performance SLA and static route updates, can the network still ping the WAN gateways when the route is down?

I'm using a Fortigate in order to load balance and have redundent internet acces for a remote site. Going there is painful as it involves taking a boat and go to a remote but inhabited island. The SD-...
user1892410's user avatar
1 vote
2 answers
382 views

ISP connected to the Fortiswitches behind the Fortigates

I have a scenario in a client that a couple of ISPs directly connect to the fortiswitches behind the fortigates firewalls instead of connecting to the fortigates or any switches before the fortigate ...
Rich's user avatar
  • 113
1 vote
1 answer
813 views

FSSO Collector agent shows old logs

Troubleshooting serious issue with FSSO - Users not getting access to internet because the primary FSSO agent fails to receive those user log on events. Out of 3 agents configured (2 in DC1 and 1 in ...
Sivagami N's user avatar
0 votes
1 answer
412 views

FortiGate 100E update through SquidProxy

I need to update a backend Fortinet FortiGate100E firewall and the only machine in the network whose ip address is authorized for internet access (from the frontend firewall) is 10.1.2.3 running ...
mfloris's user avatar
  • 195
0 votes
1 answer
755 views

Connect AP to Fortinet

I'm very new to Firewalls. Internet to my servers goes through a Fortinet Firewall. I wanted to add a wifi connection for other users as well, so I connected a NetGear Router as Access Point and gets ...
adel sameer's user avatar
-1 votes
1 answer
60 views

Holding session option in Fortiweb

I have Frotiweb installed as my WAF and it is connected to FrotiSandbox for behavioral detection. In the WAF' File Security Policy, I have the "Hold Session While Scanning" turned off and &...
Dan's user avatar
  • 1
2 votes
1 answer
685 views

Fortigate 100E user names in syslog

I am monitoring the traffic from a Fortinet Fortigate 100E firewall and I am seeing the user name of a former employee whose local and domain accounts were deleted. I can't ask Fortinet support ...
mfloris's user avatar
  • 195
1 vote
1 answer
1k views

FortiGate & FortiAuthenticator - Mapping users to Groups for VPN using Radius

I need help from you guys since I can't find anything wrong with my setup and it still doesn't work: I authenticate my Fortigate SSLVPN users against FortiAuthenticator. I want to map some users to a ...
Hamdi Kadri's user avatar
0 votes
0 answers
176 views

read traffic/bandwidth usage by protocol

I need to analyze the traffic of a Fortigate Firewall in my program. Currently, I can read the overall traffic using SNMP. The problem is that I need to analyze the type of traffic (HTTP, video ...
dan1st's user avatar
  • 101
1 vote
2 answers
2k views

2FA Setup for FortiGate SSL VPN

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
jrdvtech's user avatar
1 vote
1 answer
56 views

User Upload Quota Fortigate - 501E (6.2.1)

Im using a Fortigate 501E. my requirement is: Every user can’t upload more than 1 GB per day. is it possible to implement the above requirement. Thanks
MMDF's user avatar
  • 13
0 votes
2 answers
2k views

Switch to secondary firewall when WAN interface goes down

We are having two firewalls A and B. The model is FortiGate 60E. Both are running in HA where A is primary and B is secondary. The firewalls are running smoothly and traffic is flowing from the WAN ...
Rishi Agrawal's user avatar
0 votes
3 answers
2k views

How can i find which cisco switch port is connnected to specific port of Fortigate?

there is any way to find that which switch port connected to mgmt port of fortigate? for example can i enable lldp on Cisco switch and Fortigate together? Fortigate 1500D (version 5.6.2) and switch is ...
Behzad Soltaniyan's user avatar
0 votes
3 answers
2k views

Difference between Port (all VLANs allowed) and Trunk

I have a very basic background on networking Cisco (2960 switch), and realize that Fortiswitch 224E has the option to allow many VLANs in a port: On the other hand, is the trunk (which I assume is ...
Jorge_S7's user avatar
1 vote
1 answer
3k views

Command to get full configuration in Fortianalyzer

Could anyone please tell me how to get the full configuration info in Fortianalyzer ver 6.0.6. I’m an entry level of a network engineer. It would be nice if you can help me with simple English. ...
Chie's user avatar
  • 11
0 votes
1 answer
874 views

Can CLI commands be run of a FortiGate from crontab?

I have a recurring occurance at 02:30 (2:30 AM) every night, where DNS name resolutions fail. I'd like to run the following CLI commands on our FortiGate 60D at 02:20, so I'll have some data to debug ...
boardrider's user avatar
3 votes
3 answers
29k views

What is a "remote gateway" in FortiClient?

Apologies in advance, I am a complete noob to this and I am just barely dipping my toes into networking for the first time. I think I have a basic understanding of how most aspects work in concept, ...
Guy's user avatar
  • 141
1 vote
2 answers
540 views

NAT Problem Fortigate 501e v6.0

I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
user56946's user avatar
2 votes
1 answer
4k views

MAC Address Filtering Fortinet v6.0

I am having trouble configuring mac filtering. I do not use DHCP but am trying to figure out a way to set a mac address on a port and create a rule to block that specific mac address. So when I try ...
user56946's user avatar
2 votes
1 answer
232 views

Stopping logging info from interrupting CLI session?

With cisco devices the logging synchronous command will stop logging output from interrupting the the CLI session. Is there an equivalent command for the fortigate firewalls? i.e. When running a debug ...
Nickb033's user avatar
0 votes
1 answer
439 views

Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]

Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
joe's user avatar
  • 103
0 votes
1 answer
504 views

Do i have to configure the VLAN on my switch if its already configured in the firewall

i have fortinet 51E firewall from the firewall GUI there is an option to configure a VLAN , my question is if i configured the VLAN in the firewall do i need to configure it again in the switch?
Alaa AbuNemeh's user avatar
2 votes
3 answers
2k views

Multiple url filter list in fortigate

is this possible to use multiple urlfilter lists in web filtering on fortigate? I need to block specified sites for one user group and other sites for another user group but it looks like there is ...
piotr's user avatar
  • 71
1 vote
1 answer
7k views

How to check last executed commands by users at FortiGate

How to check last executed commands by users at FortiGate firewall like show cli history at SRX firewall
Jatinder Singh Brar's user avatar
1 vote
2 answers
1k views

Fortigate 60D - WAN Link Traffic Division

Requirement is to divide the WAN zone traffic Two different LAN IP group's internet traffic should go though 2 different WAN connections in fortigate 60D (Currently its WAN Zone(wan1 and wan2) . How ...
DintoJames's user avatar
0 votes
1 answer
51 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
HQJ's user avatar
  • 85
0 votes
1 answer
3k views

Unable to ping Google-AWS Fortigate firewall-SOLVED

Followed this guide: https://cookbook.fortinet.com/create-routing-table-associate-subnets/ I have EC2 windows instance, also have EC2 FortiGate-FortiGate VM64-AWSONDEMAND . Fortigate has 2 NIC: 192....
Milister's user avatar
  • 131
1 vote
2 answers
15k views

what is the MAC address of a device plugged in to a specific port on my Fortinet firewall?

I have a Fortinet FG-60E firewall running FortiOS v6.0.1. A wireless access point is connected to one of the ports (internal3). There are currently no other clients connected to the wireless access ...
user avatar
3 votes
3 answers
3k views

Direction incoming vs outgoing in logs

I'm trying to understand some Fortinet firewall logs but I'm not sure I fully understand what is being logged by the firewall when it comes to direction (Incoming vs Outgoing) For example: srcip=7.7....
John Doe's user avatar
  • 157
1 vote
1 answer
984 views

IP is getting through from firewall although it was in Banned List

I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
Nishad Morey's user avatar
  • 1,374
4 votes
4 answers
8k views

How to check the ifIndex on a Fortigate 1500D?

What is the exact command to check the port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate? The command diagnose sys device list root displays the index which isn't ...
Jatinder Singh Brar's user avatar
5 votes
2 answers
22k views

How to flush route cache in fortigate

Is there something like route cache on fortigate like in linux? How can i clear this cache? I have some problems with OSPF, after adding or changing redistributed network. Foritgate show routes ...
piotr's user avatar
  • 71
3 votes
2 answers
643 views

Cisco SG300 and Fortigate 90D integration

I need help in setting up my network, currently I have the following setup. All the computers can browse the internet but when I tried to create a two groups (a group that can access the internet and ...
user avatar
2 votes
2 answers
1k views

Fortigate 200e as backbone switch

As part of the reorganization of the network of my company, I intend to apply the fortilink architecture, so I want to know if the fortigate 200e can also play the role of the backbone switch of ...
Achref RIAHI's user avatar
2 votes
1 answer
2k views

Fortigate 90D, web console unavailable, SSH console hangs on certain commands

The web console just gets connection refused. The SSH console connects but hangs when when i: Attempt to change the configuration. (Hangs after the end command) Attempt to restore from a config ...
Aaron Tate's user avatar
1 vote
1 answer
963 views

Fortigate 90D SD-WAN: VPN and VoIP

i am contemplating the idea of switching our current FG 80D to a 90D and implement SD-WAN using our current 100Mbit fiber circuit (main) and the 4G LTE (cradlepoint) for internet backup. Our current ...
David T.'s user avatar
1 vote
2 answers
3k views

How do you exclude an IP range on a Fortinet router?

I have a Fortinet 100D router with 5.6.2 OS. I need to set up a SNAT rule that matches everything but a certain IP range. This is easy to do on a Linux system with iptables, but not quickly apparent ...
Rick's user avatar
  • 123
1 vote
2 answers
3k views

Fortigate VRRP or HA config

I have 2xFG 600D for redundancy setup, where to use VRRP and HA configuration? which one is optimal for Nat mode ?
IT Tech's user avatar
  • 41
0 votes
1 answer
532 views

TCP session established even if the server isn't listening on particular port

I have found out a strange behaviour when trying to establish TCP session between Citrix host and back-end server on port 5060. When I perform 'telent 172.18.52.73 5060' from Citrix host I get "...
Daniel Blazek's user avatar
1 vote
1 answer
846 views

Block youtube music videos from Fortinet

Is it possible to block just youtube video music from Fortinet? I need my users can watch videos like tutorials from youtube but not music or another kind of entertaiment.
Marisol Viramontes's user avatar
1 vote
3 answers
3k views

How to create separate network on different interfaces on Fortinet 200d and route bettwen them?

Fortinet 200d has 8 internal (LAN) interfaces, but there is no way in the GUI to modify specific interface. For example: int1 of int2 on int3. They are all under one internal LAN interface. So, how ...
Nroot's user avatar
  • 86
1 vote
1 answer
10k views

Fortinet 200D: how to implement VLAN, inter-VLAN routing, and DHCP relay?

Here are the steps I configured so far: General configuration steps The following steps provide an overview of configuring and testing the hardware used in this example. For best results in ...
Nroot's user avatar
  • 86
1 vote
1 answer
3k views

Fortigate Firewall cli query || show and get

which type information can be seen by executing keywords "GET" and "SHOW" with combination other keywords at Fortigate firewall cli in general way. Can anyone differentiate the information print by ...
Jatinder Singh Brar's user avatar