Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [fortinet]

Fortinet is a worldwide provider of network security appliances and a market leader in Network Security (FW/NGFW/UTM).

Filter by
Sorted by
Tagged with
0
votes
2answers
36 views

How can i find which cisco switch port is connnected to specific port of Fortigate?

there is any way to find that which switch port connected to mgmt port of fortigate? for example can i enable lldp on Cisco switch and Fortigate together? Fortigate 1500D (version 5.6.2) and switch is ...
0
votes
3answers
65 views

Difference between Port (all VLANs allowed) and Trunk

I have a very basic background on networking Cisco (2960 switch), and realize that Fortiswitch 224E has the option to allow many VLANs in a port: On the other hand, is the trunk (which I assume is ...
0
votes
1answer
58 views

Command to get full configuration in Fortianalyzer

Could anyone please tell me how to get the full configuration info in Fortianalyzer ver 6.0.6. I’m an entry level of a network engineer. It would be nice if you can help me with simple English. ...
0
votes
1answer
55 views

Can CLI commands be run of a FortiGate from crontab?

I have a recurring occurance at 02:30 (2:30 AM) every night, where DNS name resolutions fail. I'd like to run the following CLI commands on our FortiGate 60D at 02:20, so I'll have some data to debug ...
0
votes
0answers
94 views

Fortigate SSL VPN Tunnel - How connect to different network

I have a router and a fortigate firewall. The router has 2 active interface 192.168.100.2 and 192.168.160.1 while the fortigate interface with IP address 192.168.100.249. There is a server with IP add ...
0
votes
0answers
94 views

Famous reverse path check fail, drop on Fortigate, unable to fix

I installed this FortiGate VM for evaluation and seems like stuck with simple basic routing and reverse patch check aka anti-spoofing. So the system just have 2 VLANs on the same interface, VLAN_101 ...
0
votes
0answers
15 views

fortinet PBR redirecting traffic but natting destination IP

Please I have some issue with PBR on fortinet. in fact I configured the following PBR which seems to be working fine: config router policy edit 1 set input-device "IFMV101_01_2001" ...
1
vote
3answers
564 views

What is a “remote gateway” in FortiClient?

Apologies in advance, I am a complete noob to this and I am just barely dipping my toes into networking for the first time. I think I have a basic understanding of how most aspects work in concept, ...
1
vote
1answer
64 views

NAT Problem Fortigate 501e v6.0

I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
2
votes
1answer
757 views

MAC Address Filtering Fortinet v6.0

I am having trouble configuring mac filtering. I do not use DHCP but am trying to figure out a way to set a mac address on a port and create a rule to block that specific mac address. So when I try ...
1
vote
1answer
26 views

Stopping logging info from interrupting CLI session?

With cisco devices the logging synchronous command will stop logging output from interrupting the the CLI session. Is there an equivalent command for the fortigate firewalls? i.e. When running a debug ...
0
votes
1answer
94 views

Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)? [closed]

Can network administrator sniff and decode SSL traffic to get sensitive information like Gmail password, Skype password, Windows email account, or Remote Desktop .... ?
0
votes
1answer
143 views

Do i have to configure the VLAN on my switch if its already configured in the firewall

i have fortinet 51E firewall from the firewall GUI there is an option to configure a VLAN , my question is if i configured the VLAN in the firewall do i need to configure it again in the switch?
2
votes
2answers
228 views

Multiple url filter list in fortigate

is this possible to use multiple urlfilter lists in web filtering on fortigate? I need to block specified sites for one user group and other sites for another user group but it looks like there is ...
1
vote
1answer
1k views

How to check last executed commands by users at FortiGate

How to check last executed commands by users at FortiGate firewall like show cli history at SRX firewall
1
vote
2answers
362 views

Fortigate 60D - WAN Link Traffic Division

Requirement is to divide the WAN zone traffic Two different LAN IP group's internet traffic should go though 2 different WAN connections in fortigate 60D (Currently its WAN Zone(wan1 and wan2) . How ...
0
votes
1answer
40 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
1answer
1k views

Unable to ping Google-AWS Fortigate firewall-SOLVED

Followed this guide: https://cookbook.fortinet.com/create-routing-table-associate-subnets/ I have EC2 windows instance, also have EC2 FortiGate-FortiGate VM64-AWSONDEMAND . Fortigate has 2 NIC: 192....
1
vote
2answers
4k views

what is the MAC address of a device plugged in to a specific port on my Fortinet firewall?

I have a Fortinet FG-60E firewall running FortiOS v6.0.1. A wireless access point is connected to one of the ports (internal3). There are currently no other clients connected to the wireless access ...
3
votes
1answer
677 views

Direction incoming vs outgoing in logs

I'm trying to understand some Fortinet firewall logs but I'm not sure I fully understand what is being logged by the firewall when it comes to direction (Incoming vs Outgoing) For example: srcip=7.7....
1
vote
1answer
407 views

IP is getting through from firewall although it was in Banned List

I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
3
votes
3answers
1k views

How to check the ifIndex on a Fortigate 1500D?

What is the exact command to check the port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate? The command diagnose sys device list root displays the index which isn't ...
3
votes
1answer
4k views

How to flush route cache in fortigate

Is there something like route cache on fortigate like in linux? How can i clear this cache? I have some problems with OSPF, after adding or changing redistributed network. Foritgate show routes ...
3
votes
1answer
341 views

Cisco SG300 and Fortigate 90D integration

I need help in setting up my network, currently I have the following setup. All the computers can browse the internet but when I tried to create a two groups (a group that can access the internet and ...
2
votes
2answers
796 views

Fortigate 200e as backbone switch

As part of the reorganization of the network of my company, I intend to apply the fortilink architecture, so I want to know if the fortigate 200e can also play the role of the backbone switch of ...
2
votes
1answer
1k views

Fortigate 90D, web console unavailable, SSH console hangs on certain commands

The web console just gets connection refused. The SSH console connects but hangs when when i: Attempt to change the configuration. (Hangs after the end command) Attempt to restore from a config ...
1
vote
1answer
738 views

Fortigate 90D SD-WAN: VPN and VoIP

i am contemplating the idea of switching our current FG 80D to a 90D and implement SD-WAN using our current 100Mbit fiber circuit (main) and the 4G LTE (cradlepoint) for internet backup. Our current ...
1
vote
2answers
2k views

How do you exclude an IP range on a Fortinet router?

I have a Fortinet 100D router with 5.6.2 OS. I need to set up a SNAT rule that matches everything but a certain IP range. This is easy to do on a Linux system with iptables, but not quickly apparent ...
1
vote
2answers
1k views

Fortigate VRRP or HA config

I have 2xFG 600D for redundancy setup, where to use VRRP and HA configuration? which one is optimal for Nat mode ?
0
votes
1answer
403 views

TCP session established even if the server isn't listening on particular port

I have found out a strange behaviour when trying to establish TCP session between Citrix host and back-end server on port 5060. When I perform 'telent 172.18.52.73 5060' from Citrix host I get "...
1
vote
1answer
545 views

Block youtube music videos from Fortinet

Is it possible to block just youtube video music from Fortinet? I need my users can watch videos like tutorials from youtube but not music or another kind of entertaiment.
1
vote
2answers
2k views

How to create separate network on different interfaces on Fortinet 200d and route bettwen them?

Fortinet 200d has 8 internal (LAN) interfaces, but there is no way in the GUI to modify specific interface. For example: int1 of int2 on int3. They are all under one internal LAN interface. So, how ...
1
vote
1answer
6k views

Fortinet 200D: how to implement VLAN, inter-VLAN routing, and DHCP relay?

Here are the steps I configured so far: General configuration steps The following steps provide an overview of configuring and testing the hardware used in this example. For best results in ...
1
vote
1answer
1k views

Fortigate Firewall cli query || show and get

which type information can be seen by executing keywords "GET" and "SHOW" with combination other keywords at Fortigate firewall cli in general way. Can anyone differentiate the information print by ...
1
vote
1answer
192 views

QFX 5200 and Fortinet 3800 connectivity

We are planning to connect a pair of QFX 5200 (QFX is a WAN device where ISP connections terminates) and a pair Fortinet 3800. Fortinet further connects to my LAN core switch. For redundancy purpose ...
2
votes
1answer
2k views

Connecting to fortigate 5.4 with vpnc (ipsec)

I have a fortigate 90b(?) running 5.4. wan1 is set to a publically accessible address. Our internal network is 192.168.100.0 I can connect via ipsec and I can access the gateway, which is the ...
1
vote
1answer
841 views

Is there anyway to set Quota for users in Fortigate?

someone told me that there is a solution for setting Quota in New FortiOS (v5.4), but i can't find anything to do that. i just want to know, is there anyway to set Quota for my local internet users, ...
1
vote
1answer
582 views

Fortigate - Routing DSCP tagged packets through different WAN connections

I have 3 WAN connections and a remote site with a single WAN address. What I'd like to do is monitor the latency towards the remote site using a single machine (Opsview) on our LAN but through all 3 ...
2
votes
1answer
4k views

Fortigate “remembers” bad routes

I'm fairly new to Fortinet devices, so please let me know if I'm making a rookie mistake. I have a FortiGate 90D (v5.2.5,build701) which has an IPSec site-to-site VPN connection to another firewall ...
1
vote
1answer
1k views

Backup configuration from SonicWall using ssh or scp

I'm evaluating whether to get a SonicWall TZ or a comparable Fortinet firewall. One thing i can't find but would really like to have is the ability to automate backing up the firewall configuration. ...
1
vote
1answer
6k views

Firewall preventing access to internal resource using external NAT address when traffic comes in from a third interface

I'm using a Fortinet 311B firewall and having an issue understanding why this traffic is being blocked. There is an access rule and matching NAT statement for an external IP address pointing to an ...
1
vote
1answer
2k views

Fortinet 60D acting as IPSec VPN Client?

Is there a way to make the Fortigate 60D act as a VPN client connecting to an ASA IPSec VPN without setting up a site-to-site VPN? In other words, have the Fortinet act as a typical PC would ...
6
votes
4answers
16k views

How do I pinpoint bandwidth consumers on my Fortigate?

For a long time now we've been having huge connection problems at work. The Internet connection is bad, for sure, but I don't think they are the main problem, they don't see any packet loss on their ...
7
votes
1answer
9k views

Source NATing Fortigate typical scenario

I have a small query with respect to NATing in Fortigate.I'm struck in particular by a scenario where the remote network allows users with a specific IP range with a specific port for RDP over a ...
2
votes
3answers
25k views

How to disable unused LAN ports on Fortigate

I know I can set the administrative status of WAN/DMZ ports to down to disable them, but I can only see how to set the entire internal interface up/down. Is there a way to set individual LAN ports ...
4
votes
2answers
5k views

Fortigate logging: how to prevent ping to firewall interface to be logged while still getting logs for implicitly denied traffic

Is there a way to configure a fortinet firewall (e.g, fortigate600 running FortiOS 5 or FortiOS 4) so it do not generate log entries for pings that are directed to the firewall's own interfaces but ...
1
vote
1answer
99 views

Cisco ASA creating two identicial Tunnel IDs?

I'm not sure why this is happening, but I have a Cisco ASA peering with a Forigate to create VPN Site-to-Site Tunnel. The odd thing is I see this in ASDM, the Cisco ASA is creating two(2) identical ...
3
votes
1answer
7k views

Fortigate Open Ports

I need to open this port in Fortigate: 443 PSOM/TLS Outbound Data sharing sessions But i dont know where I can open. I created a Custom Service, chose the option of TCP, but do not know if ...
6
votes
5answers
41k views

Reset admin password on Fortinet FortiWiFi 60D

I've tried to log in to this device by doing the following. Default credentials username: admin password: <none> Maintainer credentials in the FortiExplorer console interface. username: ...
4
votes
2answers
731 views

Is Fortigate-60D a fanless model?

I would like to know if Fortigate-60D is a fanless model or not. However, neither Fortigate-60D datasheet nor Fortinet Product Matrix provide any information about this topic. Could you please ...