firewall appliance made by fortinet - includes capwap wireless controller and fortios software

learn more… | top users | synonyms

2
votes
1answer
21 views

Can I have an alert when a IPSEC is down in Fortigate 80C?

We have a fortigate 80c and 60D with an IPSEC VPN . Is there a way to use the log (or other tool) to send an email alert when the tunnel is down? I couldn't see anything on the Log & Report tab
0
votes
0answers
70 views

Fortigate Firmware Upgrade

I've two Fortigate 40C here, which are currently running on firmware "Fortigate-40C v4.0,build0639,120906 (MR3 Patch 10)". I want to upgrade to the latest MR3 release, which appears to be MR3 Patch ...
1
vote
1answer
113 views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
1
vote
1answer
108 views

Get external public ip from command line in fortinet

Is there any way to know the public ip address of a fortinet? There are many services such as icanhazip.com that tell you the current ip. In linux, I would just run: curl http://icanhazip.com How ...
0
votes
2answers
449 views

IPSec VPN Shrew to Fortigate

I'm trying to configure an IPSec VPN on a Fortigate 80C and connect to it using Shrew Soft VPN. I'm stuck with a negotiation failure, even though debugging on the Fortigate unit shows the same values ...
0
votes
1answer
122 views

SSL VPN on Fortigate 100D Dual ISP

I have a Fortigate 100D and have been using it with a single internet connection for some time without issue and have also been using SSL VPN to connect into the network. The SSL VPN uses 2 factor ...
2
votes
2answers
494 views

Fortigate 100d 802.3ad bonding / Link aggregation

My network is as follows: 1 x Fortigate 100d with the two WAN ports connected to: Ethernet ISP with STATIC IP configured manually (20 Mbps symmetric) via ISP A Ethernet ISP with STATIC IP ...
0
votes
0answers
61 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
0
votes
2answers
709 views

Allow traffic from ssl-vpn to enter ipsec tunnel on fortigate

we configured our FortiGate 50B to route traffic from our local net 192.168.10.* (which is our office) to a remote network 172.29.112.* using an ipsec tunnel. Everything works fine as long my computer ...
1
vote
0answers
180 views

Trying to change a custom VPN port back to the original on Fortigate 40C

We recently changed our firewall and bought a Fortigate 40C device. We wanted to use our old VPN settings. The Fortigate support technician told us that this model was new and he didn't know it in ...
0
votes
1answer
336 views

Fortinet Fortigate software switch configured IP not accessible

I'm trying to get a software switch configuration working on a Fortigate 100D. It appears like devices plugged into the software switch ports can communicate between each-other, but they cannot reach ...
0
votes
1answer
250 views

How to disable SSL-VPN on FortiOS 5.0

Hearbleed issue. Must disable SSL-VPN. I wasnt able to find it in the GUI. Might there happen to be a CLI command?
0
votes
1answer
763 views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
0answers
499 views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
0
votes
0answers
712 views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following ...
1
vote
1answer
1k views

fortigate traffic packets not logged

Ciao, we use Fortigate device since years and now we need to check bandwidth usage per protocol and this is is not possible. We made this test: 1) all policy Logging Options - Log all Sessions 2) ...
0
votes
0answers
206 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
0
votes
0answers
472 views

Fortigate VPN can't reach site

I've two Fortigate's here and I use one of them for each site. Site A Site B 192.168.2.0/24 <---------- VPN ...
0
votes
0answers
983 views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
1
vote
1answer
2k views

Fortigate PPTP push default gateway and DNS server

I've got a fortigate 40C here and copied the config mainly from a Fortigate60. Everything is working fine, but I've got some problems with the PPTP VPN connection. I want to add SSL VPN in the future, ...
0
votes
1answer
210 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
1
vote
2answers
4k views

MikroTik IPsec client Fortigate 'Received ESP packet with unknown SPI.'

We have a client with 6 sites using IPsec. Every now and again, possibly once a week, sometimes once a month, data just stops flowing from the remote Fortigate VPN server to the local MikroTik IPsec ...
0
votes
1answer
187 views

Does Fortigate 100A support IPv6? [closed]

Tried searching through the net but couldn't find any info since the product is already discontinued. Can anyone confirm if this particular product supports IPv6?
2
votes
1answer
2k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
1answer
3k views

Fortinet multiple WAN IP to several ports

I have a 5 public IP address range. (ie: 1.1.1.1 to 1.1.1.5) I would like to assign the first to port 1 transparently in a way that a VPN router (RV082) could connect via it and respond ...
0
votes
3answers
7k views

Fortigate bandwidth monitoring

I have a Fortigate 200B with Forti OS 5.0. How can I watch the total bandwidth being used by my unit both incoming and outgoing? Thanks
0
votes
0answers
339 views

Suddenly cannot reach (ping) remote server on a remote site

We have 2 sites linked together with VPN tunnel (Fortigate 60C devices). On each site I have ESXi server with a couple of VMs. Normally, everything works fine. Site 1 (S1) subnet is ...
0
votes
1answer
502 views

Fortinet FortiWifi 20C Reset

I've tried multiple times to reset the login on our router, 5 seconds on the reset button, 30 seconds on the reset button, power cycle. No matter what I google and do, I can't seem to get this thing ...
0
votes
1answer
220 views

Fortigate policy hierarchy - what does “ANY” actually mean?

I've tried asking this in Fortinet's official forums yet no one knew the answer. I have this in my Fortigate 100D: Port1(internal) -- > ANY interface -- > ANY service I also have a route based ...
4
votes
6answers
15k views

Fortigate VPN client “Unable to logon to the server. Your username or password may not be properly configured for this connection. (-12)”

We're running a Fortigate 100D, and having some trouble with the SSL VPN via FortiClient. I installed FortiClient on an external Windows 7 PC a few days pack and the SSL VPN connected and worked. I ...
2
votes
1answer
2k views

Network Tap (SPAN port) on FortiGate 100D (FortiOS 4.0MR3)

I'm dealing with a FortiGate 100D for the first time, and am scratching my head as there doesn't seem to be an easy way to mirror ports in the switch; which is really a facility that I presumed it ...
0
votes
1answer
484 views

How to set Fortigate 60 as gateway

I need to use Fortigate 60 as gateway. I just switched to NAT mode. Gateway IP from ISP: XXX.255.136.41 - 255.255.255/48 Real IP from ISP - WAN2 IP: XXX.255.136.45 Internal IP : 192.168.35.1 I can ...
2
votes
2answers
702 views

VLAN Traffic changing source when captured at firewall

1) HP Switch config below 2) Fortinet Policy in attached image Right now, we are a flat network of roughly 320 wireless devices, and about 100 wired devices. We have a FortiGate 300C firewall with a ...
0
votes
2answers
215 views

log server setup and testing, with log manager opensource

I've been trying to get a new, centralized, log-server up and running for some testing and have run into some problems. First part is that I've installed Kibana but can't get anything indexed, tried ...
1
vote
1answer
3k views

FortiGate IPsec VPN: Configuring Multiple Phase 2 Connections (Multiple Subnets)

I am trying to make an IPsec connection to a FortiGate router using OpenSwan. The FortiGate sits on two distinct subnets and I need to access both of them. In the FortiGate I have defined one Phase 1 ...
1
vote
1answer
2k views

DHCP relay through Fortigate 60B firewall isn't working

I inherited a network with a Fortigate 60B firewall. The VPN dial up client works right now as long as I specify a static IP. Problem is, it becomes hard to manage when I need to assign each and every ...
2
votes
1answer
1k views

Fortigate administrative overrides - how to include all subdomains?

I need a nudge in the right direction with this: Situation: I got Fortigate device with FortiOS4.0 with enabled FortiGuard web filter. I block a category, let's say "freeware download" (example). ...
0
votes
1answer
1k views

Fortigate restrict traffic through one external IP

I've got a fortigate 400A at a client's site. They've got a /26 from British Telecom, and we're using 4 of those IPs as a NAT Pool. Is there a way to say that traffic from 172.18.4.40-45 can only ...