firewall appliance made by fortinet - includes capwap wireless controller and fortios software

learn more… | top users | synonyms

0
votes
2answers
73 views

How to configure Fortigate 60D as L2PT/IPSEC client

I have a firewall Fortigate 60D and I need to create a tunnel to a L2TP/IPSEC server, so the firewall has to act as a client. Is it possible? I configured the L2TP/IPSEC server on a Linux Debian ...
0
votes
0answers
20 views

How to provide QOS for VOIP in Juniper?

I have 10 computers using browser based VOIP solution and they have problem with the internet connection. they are connected (wire) to Juniper Switches then to Fortigate. How can improve the quality ...
0
votes
1answer
404 views

Does anyone know what the Fortigate SSL VPN error 6 on the linux client means?

I often get: SSLVPN down unexpectedly with error:6 When trying to connect the 64bit/forticlientsslvpn_cli. My experience has been: Once you start getting, no number of retries will get you ...
-1
votes
1answer
55 views

Tomcat server port access

I have changed the tomcat default port to 8091 (eg. http://localhost:8091/project) which has been set up in intranet server and is working very fine within the network.I have to provide access to the ...
0
votes
1answer
259 views

IPsec VPN between Fortigate 60C and openswan up, but no traffic

I get visual confirmation that the tunnel is working from the fortigate GUI but, it also says i don't have 1 byte of traffic, the linux server also confirms the tunnel is open but i can't ping ...
0
votes
0answers
44 views

site not reachable after firewall reboot

After rebooting my Fortigate firewall, I can no longer reach a specific website from within the internal lan (I'd better say from a specific public ip since all the machines belonging to the internal ...
3
votes
1answer
543 views

VPN ERROR 500 STATE_MAIN_I1, unable to start phase2

i'm trying to set up a site to site vpn to a fortigate 60c from a CentOS 7 with openswan, the error i get everytime is the following 000 #1: "office":500 STATE_MAIN_I1 (sent MI1, expecting MR1); ...
0
votes
1answer
66 views

Not able to connect to GitHub though the Firewall

We have Fortigate Firewall install on the network, What port I should open to connect to the GitHub repository using the https:// protocol. I found a similar question , And allowed the port suggested ...
4
votes
0answers
363 views

VLAN ID over DHCP for Management Interface of Fortinet FortiAP

When configuring the FortiAP device it's desirable to configure the VLAN ID for the tagged management network. Accordingly to the manual it's possible to do so by "telnetting" to the FortiAP device ...
1
vote
0answers
158 views

Using airport extreme as an AP with true bridge mode (forwarding 802.1x auth)

So here is my setup. I have a Router (Fortigate) 4 airport Extreme, and a radius/ldap server on a distant server. I want my user to authenticate with the radius or LDAP server, and be able to create ...
0
votes
0answers
601 views

Fortigate - cannot ping public IP in dual WAN ISP setup

I have a fortigate 100c that is configured with 2 WAN ISP's LAN1 -------------- ISP 1 (static pub 1.1.1.1) |-FORTIGATE-| LAN2 ---------------ISP 2 (dynamic pub 10.1.1.1) I have policy routes ...
0
votes
0answers
476 views

Fortigate 80c router - Limit the bandwidth of specific ips

We have a fortigate 80c router in our office. We have two server that keep uploading files and take all the office bandwidth. How can i limit their bandwidth from the router?
0
votes
1answer
679 views

View logs from Fortigate SSLVPN client for windows

I have some users that have trouble when connecting to my vpn, I want to see what the errors look like on the user side, hence I enabled the debugging in the client at "Log Level -> Debug" (where you ...
1
vote
0answers
590 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
799 views

FortiGate 310B public ip pool into internal port

I have a FortiGate 310B with WAN port with /27 public IP pool from the ISP. The WAN port is configured with primary IP 1.1.1.1/27 I would like to provide servers within the Internal port a public IP. ...
2
votes
3answers
1k views

Remotely connect to device with ip from different subnet

I have to figure out some way to remotely connect to D-LINK switch currently working on default address 10.90.90.90 (service guys have replaced broken one, but they have forgotten to do initial ...
0
votes
1answer
196 views

Fortigate 100D - L2TP range

I need a specific number of hosts connected on Fortigate with L2TP/IPsec, about 300. I tried to configure this range via console config vpn l2tp ... set sip 10.0.0.1 ... eip 10.0.1.254 It says that ...
1
vote
0answers
519 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
2
votes
1answer
4k views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
3
votes
1answer
1k views

Can I have an alert when a IPSEC is down in Fortigate 80C?

We have a fortigate 80c and 60D with an IPSEC VPN . Is there a way to use the log (or other tool) to send an email alert when the tunnel is down? I couldn't see anything on the Log & Report tab
0
votes
1answer
972 views

Fortigate Firmware Upgrade

I've two Fortigate 40C here, which are currently running on firmware "Fortigate-40C v4.0,build0639,120906 (MR3 Patch 10)". I want to upgrade to the latest MR3 release, which appears to be MR3 Patch ...
1
vote
1answer
1k views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
1
vote
3answers
3k views

Get external public ip from command line in fortinet

Is there any way to know the public ip address of a fortinet? There are many services such as icanhazip.com that tell you the current ip. In linux, I would just run: curl http://icanhazip.com How ...
0
votes
3answers
3k views

IPSec VPN Shrew to Fortigate

I'm trying to configure an IPSec VPN on a Fortigate 80C and connect to it using Shrew Soft VPN. I'm stuck with a negotiation failure, even though debugging on the Fortigate unit shows the same values ...
1
vote
1answer
881 views

SSL VPN on Fortigate 100D Dual ISP

I have a Fortigate 100D and have been using it with a single internet connection for some time without issue and have also been using SSL VPN to connect into the network. The SSL VPN uses 2 factor ...
2
votes
2answers
3k views

Fortigate 100d 802.3ad bonding / Link aggregation

My network is as follows: 1 x Fortigate 100d with the two WAN ports connected to: Ethernet ISP with STATIC IP configured manually (20 Mbps symmetric) via ISP A Ethernet ISP with STATIC IP ...
0
votes
0answers
288 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
1
vote
4answers
6k views

Allow traffic from ssl-vpn to enter ipsec tunnel on fortigate

we configured our FortiGate 50B to route traffic from our local net 192.168.10.* (which is our office) to a remote network 172.29.112.* using an ipsec tunnel. Everything works fine as long my computer ...
1
vote
0answers
502 views

Trying to change a custom VPN port back to the original on Fortigate 40C

We recently changed our firewall and bought a Fortigate 40C device. We wanted to use our old VPN settings. The Fortigate support technician told us that this model was new and he didn't know it in ...
0
votes
1answer
1k views

Fortinet Fortigate software switch configured IP not accessible

I'm trying to get a software switch configuration working on a Fortigate 100D. It appears like devices plugged into the software switch ports can communicate between each-other, but they cannot reach ...
1
vote
1answer
2k views

How to disable SSL-VPN on FortiOS 5.0

Hearbleed issue. Must disable SSL-VPN. I wasnt able to find it in the GUI. Might there happen to be a CLI command?
0
votes
1answer
4k views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
0answers
1k views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
0
votes
0answers
2k views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following ...
1
vote
1answer
4k views

fortigate traffic packets not logged

Ciao, we use Fortigate device since years and now we need to check bandwidth usage per protocol and this is is not possible. We made this test: 1) all policy Logging Options - Log all Sessions 2) ...
0
votes
0answers
533 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
0
votes
0answers
1k views

Fortigate VPN can't reach site

I've two Fortigate's here and I use one of them for each site. Site A Site B 192.168.2.0/24 <---------- VPN ...
0
votes
1answer
3k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
1
vote
1answer
6k views

Fortigate PPTP push default gateway and DNS server

I've got a fortigate 40C here and copied the config mainly from a Fortigate60. Everything is working fine, but I've got some problems with the PPTP VPN connection. I want to add SSL VPN in the future, ...
0
votes
1answer
549 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
2
votes
2answers
10k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
0
votes
1answer
315 views

Does Fortigate 100A support IPv6? [closed]

Tried searching through the net but couldn't find any info since the product is already discontinued. Can anyone confirm if this particular product supports IPv6?
4
votes
1answer
4k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
1answer
8k views

Fortinet multiple WAN IP to several ports

I have a 5 public IP address range. (ie: 1.1.1.1 to 1.1.1.5) I would like to assign the first to port 1 transparently in a way that a VPN router (RV082) could connect via it and respond ...
0
votes
4answers
29k views

Fortigate bandwidth monitoring

I have a Fortigate 200B with Forti OS 5.0. How can I watch the total bandwidth being used by my unit both incoming and outgoing? Thanks
1
vote
1answer
925 views

Suddenly cannot reach (ping) remote server on a remote site

We have 2 sites linked together with VPN tunnel (Fortigate 60C devices). On each site I have ESXi server with a couple of VMs. Normally, everything works fine. Site 1 (S1) subnet is ...
0
votes
1answer
1k views

Fortinet FortiWifi 20C Reset

I've tried multiple times to reset the login on our router, 5 seconds on the reset button, 30 seconds on the reset button, power cycle. No matter what I google and do, I can't seem to get this thing ...
0
votes
1answer
462 views

Fortigate policy hierarchy - what does “ANY” actually mean?

I've tried asking this in Fortinet's official forums yet no one knew the answer. I have this in my Fortigate 100D: Port1(internal) -- > ANY interface -- > ANY service I also have a route based ...
4
votes
6answers
46k views

Fortigate VPN client “Unable to logon to the server. Your username or password may not be properly configured for this connection. (-12)”

We're running a Fortigate 100D, and having some trouble with the SSL VPN via FortiClient. I installed FortiClient on an external Windows 7 PC a few days pack and the SSL VPN connected and worked. I ...
2
votes
1answer
5k views

Network Tap (SPAN port) on FortiGate 100D (FortiOS 4.0MR3)

I'm dealing with a FortiGate 100D for the first time, and am scratching my head as there doesn't seem to be an easy way to mirror ports in the switch; which is really a facility that I presumed it ...