5
votes
Is Fortigate-60D a fanless model?
Yes, the Fortigate FG-60D and it's sibling FortiWifi FWF-60D are both fanless. I've seen and sold a lot of them.
- 880
5
votes
Accepted
TCP session established even if the server isn't listening on particular port
Fortinet has an ALG (proxy) for SIP (a VoIP protocol) since this protocol uses dynamic ports (like FTP) and thus need to be handled in a specific way. Port 5060 is the default port for SIP. This means ...
- 2,323
5
votes
Accepted
What is a "remote gateway" in FortiClient?
The FQDN of where you want the client to connect to. Like if your company VPN is vpn.companydomain.com, you would put that in there. You could also just put the IP address behind the FQDN if you know ...
- 4,670
5
votes
Accepted
FortiGate 100E update through SquidProxy
The easiest solution is to download the current firmware from the support webpage (https://support.fortinet.com) and import it manually over the Admin Web GUI.
That are possible over System->...
- 164
4
votes
Fortigate "remembers" bad routes
First off, this behavior is as expected.
The Fortigate (as a stateful firewall) will create a session from the information of the first packet arriving. It will determine the route to apply and ...
- 880
4
votes
How do I pinpoint bandwidth consumers on my Fortigate?
This sounds like a case study for sFlow. The best way for you to figure out what's going wrong is to figure out who's talking to who - and how much. Just spin up your favorite sFlow analyzer and ...
- 5,469
4
votes
How to flush route cache in fortigate
From the CLI you can issue the following command to restart the routing service.
exec router restart
To restart OSPF, you can use.
exec router clear ospf process
- 536
4
votes
Accepted
How to check the ifIndex on a Fortigate 1500D?
The following should show you the snmp-index for each interface on the Fortigate. You can also modify this field if you so choose.
# config system interface
(interface) # show
- 536
4
votes
Accepted
How can i find which cisco switch port is connnected to specific port of Fortigate?
You can check the MAC address table on the switch to see on what port you learned the MAC address of the Fortigate's management interface.
It should be possible to enable LLDP on the Fortinet as of ...
- 16.5k
3
votes
How do I pinpoint bandwidth consumers on my Fortigate?
Some advice that comes to my mind:
1. The FG-60 is quite old, right, but it's nowhere from being overloaded. Watch the memory consumption (preferably in the CLI, get sys perf stat) - if it crosses the ...
- 880
3
votes
Block youtube music videos from Fortinet
In a word: no. YouTube provides no mechanisms to allow a network device like a firewall to differentiate between content types.
The only method I'm aware of that sort of works is to use a proxy to set ...
- 2,439
3
votes
How to flush route cache in fortigate
This might be a little late, but since the question still pops up on the Google search, I thought I answer it.
The following command works in 6.2.7* and above, but does not show up as an argument when ...
- 31
3
votes
Accepted
Can Fortinet firewall's administrator decode SSL traffic to get logging information (Gmail/Skype/RDP password)?
Whether or not a VPN tunnel is used, network administrators cannot inspect SSL traffic unless they either have access to the server's private key or use SSL deep inspection.
SSL deep inspection ...
- 78.2k
3
votes
What is a "remote gateway" in FortiClient?
The remote gateway is your Fortigate unit - FortiClient is the client-side software for a VPN tunnel, the other side is a Fortigate router. You can't use FortiClient to tunnel across two PCs.
- 78.2k
3
votes
Difference between Port (all VLANs allowed) and Trunk
Basically, a port with all VLANs allowed is a VLAN trunk. A trunk doesn't need to allow all VLANs, however.
Trunk used to be the port mode for multiple (tagged) VLANs, Cisco jargon. Other vendors use ...
- 78.2k
2
votes
Accepted
Backup configuration from SonicWall using ssh or scp
Sonicwall export files are compiled , thus is not possible to edit them offline and reupload to a different appliace.
There is a way to fetch config files , I never tried, but on stackoverflow there ...
- 401
2
votes
Connecting to fortigate 5.4 with vpnc (ipsec)
There's 2 things I notice:
1- You assign IP addresses to the VPN clients in the same range as for internal (LAN) hosts. When a client dials in the FGT (90D) automatically creates a host route to ...
- 880
2
votes
Is there anyway to set Quota for users in Fortigate?
You can set a quota via the web filter profile. The quota can be configured per category, and the category action need to be set to either Monitor / Warning / Authenticate.
The quota can be a traffic ...
- 76
2
votes
Accepted
Fortigate Firewall cli query || show and get
As far as I can remember show is used to check parameters and options as they are set in configuration, while get is used to check runtime values. Let say you have configured an interface for ...
- 2,884
2
votes
Fortigate VRRP or HA config
Additionally, FortiOS HA has several advantages over VRRP:
1- it is stateful, that is, the session, routing and NAT tables are kept synchronized on the slave unit. In case of HA failover, sessions ...
- 880
2
votes
Fortigate 90D, web console unavailable, SSH console hangs on certain commands
It sounds like the flash filesystem (or hardware) is corrupt and needs rebuilding.
This Fortigate does not have an internal disk but a flash memory storage for holding the firmware, the configuration ...
- 880
2
votes
Fortigate 90D SD-WAN: VPN and VoIP
The public IP is nailed to your AT&T router which will be down when it's down. BGP would be required to tell the Internet that your public IP is now accessible via another link.
I don't know of ...
- 4,349
2
votes
Accepted
How do you exclude an IP range on a Fortinet router?
There are 2 ways to do this:
1- create 2 policies, one where the destination is the exclusion range, and one following it with the whole destination range. Enable SNAT just in the second policy. Note ...
- 880
2
votes
Fortinet 60D acting as IPSec VPN Client?
Yes, one of the ways to set up an IPsec VPN is to create a "dial-up VPN". This is exactly the same as what a (software) VPN client does.
The exact configuration steps depend on the version of FortiOS ...
- 880
2
votes
Accepted
Fortigate 200e as backbone switch
The cited switches do not only have a throughput of 88 Gbps (424D) and 176 Gbps (448D) but also feature 2/4 10GE ports for uplinks.
In comparison, the maximum throughput of a FGT-200E is rated at 20 ...
- 880
2
votes
Cisco SG300 and Fortigate 90D integration
Since you route your VLANs on the SG300, the Fortigate can't ever see the client's MAC address. All it can see is the SG300's MAC address on VLAN 1 (which you've probably permitted so everyone gets ...
- 78.2k
2
votes
Accepted
Stopping logging info from interrupting CLI session?
No, this is not possible in FOS. Even with multiple (ssh) terminal windows, debug info will be printed on ALL windows. Multiple terminals will only faciliate command input.
- 880
2
votes
Accepted
MAC Address Filtering Fortinet v6.0
I assume that you are using Fortigate firewall. You can use below codes for your work
config firewall ipmacbinding setting
set bindthroughfw {enable | disable} - this is enabling IPMAC binding to ...
- 3,097
2
votes
Can CLI commands be run of a FortiGate from crontab?
The 60D is a bit tricky since it doesn't log much locally. I never understood why it can't log to a local USB stick. I'd recommend setting up a syslog server.
Can more than one CLI commands be ...
- 78.2k
Only top scored, non community-wiki answers of a minimum length are eligible