Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

learn more… | top users | synonyms

0
votes
0answers
12 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
0
votes
0answers
39 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
1
vote
1answer
185 views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
0
votes
1answer
39 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
1
vote
1answer
283 views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
1
vote
1answer
259 views

Get external public ip from command line in fortinet

Is there any way to know the public ip address of a fortinet? There are many services such as icanhazip.com that tell you the current ip. In linux, I would just run: curl http://icanhazip.com How ...
0
votes
0answers
109 views

Fortinet static nat

I have been doing fortinet's since 2009, so I kind of know my way around the box... I'm just got another I setup this evening, a 200D, with the latest fortiOS 5.2. It seems they still do not have a ...
0
votes
0answers
48 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
0
votes
0answers
77 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
0
votes
1answer
403 views

How to disable SSL-VPN on FortiOS 5.0

Hearbleed issue. Must disable SSL-VPN. I wasnt able to find it in the GUI. Might there happen to be a CLI command?
0
votes
1answer
1k views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
0answers
627 views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
0
votes
0answers
865 views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following ...
0
votes
1answer
93 views

ScreenOS Failover tunnel

I have a route-based vpn from my site (Netscreen204) to a customer site (Fortinet) . They want a second, backup tunnel in case of failure, and will be using the Fortune there too. The only thing I ...
0
votes
0answers
268 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
0
votes
1answer
1k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
0
votes
1answer
265 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
2
votes
1answer
2k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
1answer
2k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
4k views

Fortinet multiple WAN IP to several ports

I have a 5 public IP address range. (ie: 1.1.1.1 to 1.1.1.5) I would like to assign the first to port 1 transparently in a way that a VPN router (RV082) could connect via it and respond ...
0
votes
3answers
9k views

Fortigate bandwidth monitoring

I have a Fortigate 200B with Forti OS 5.0. How can I watch the total bandwidth being used by my unit both incoming and outgoing? Thanks
0
votes
1answer
588 views

Fortinet FortiWifi 20C Reset

I've tried multiple times to reset the login on our router, 5 seconds on the reset button, 30 seconds on the reset button, power cycle. No matter what I google and do, I can't seem to get this thing ...
4
votes
6answers
18k views

Fortigate VPN client “Unable to logon to the server. Your username or password may not be properly configured for this connection. (-12)”

We're running a Fortigate 100D, and having some trouble with the SSL VPN via FortiClient. I installed FortiClient on an external Windows 7 PC a few days pack and the SSL VPN connected and worked. I ...
2
votes
1answer
2k views

Network Tap (SPAN port) on FortiGate 100D (FortiOS 4.0MR3)

I'm dealing with a FortiGate 100D for the first time, and am scratching my head as there doesn't seem to be an easy way to mirror ports in the switch; which is really a facility that I presumed it ...
1
vote
0answers
507 views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
1
vote
1answer
4k views

FortiGate IPsec VPN: Configuring Multiple Phase 2 Connections (Multiple Subnets)

I am trying to make an IPsec connection to a FortiGate router using OpenSwan. The FortiGate sits on two distinct subnets and I need to access both of them. In the FortiGate I have defined one Phase 1 ...
0
votes
1answer
2k views

Fortigate + HP ProCurve Load Balancing

I have a FortiGate 100D + HP ProCurve 2824 linked together by 4x 1Gb links. The ProCurve is configured to have ports 21-24 trunked together and load balance them. The 4 cables from these ports are ...
1
vote
2answers
3k views

Send Magic packet from Fortinet Firewall

Is it possible to send a magic packet (WOL) from a fortinet firewall? I read the manual but couldn't find anything, just wondering if anyone achieved something similar. I'm connecting through an ...
2
votes
1answer
7k views

How to delete IPSEC VPN tunnel from Fortigate 60

I have had a IPSEC connection setup between two firewalls. Now I want to remove the tunnel in my firewall, a "Fortigate 60". There are two phases, "Phase 1" and "Phase 2" for each IPSEC connection. ...
0
votes
1answer
270 views

Site-to-site VPN

We are a small business company that is based in Sydney and opened a new office in London. Number of employees in Sydney office is 25 and in London is 6 employees. So the traffic isn't that high. ...
3
votes
1answer
406 views

UDP Packet Size.. max, ping failing to 3G.. Recalcitrant software vendor

We have a network of 330 clients (Service Vans) connected via 3G to our central office. Currently these clients are connected via a small ruggedized 3G router that establishes the 3G connection and ...
1
vote
2answers
1k views

Destination Based Routing with Fortigate 60B Firewall

First let me start off that I'm not very knowledgeable when it comes to networking so some terms what not may be over my head. I just know enough to get around. So all traffic goes through the WAN 1 ...
0
votes
2answers
8k views

Fortinet SSL VPN Client Setup Without GUI on Linux (centos)

How can I install and setup a fortinet SSL VPN client on a VPS that's running on Centos? I have problem to do it because all guide I have are all using GUI which is not installed on the VPS to save ...
0
votes
1answer
17k views

Fortigate Remote VPN : no matching gateway for new request

I am trying to configure a Fortigate 60C to act as an IPSec endpoint for remote VPN. I configured it like this : SCR-F0-FGT100C-1 # diagnose vpn ike config vd: root/0 name: SCR-REMOTEVPN serial: 7 ...
2
votes
1answer
672 views

Check what the average packet size is in a network (what firewall/router should I get)

Is there any way to do this? We are looking into buying a Fortigate 100D but are unsure if it will hold up to our requirements. http://www.fortinet.com/products/fortigate/100D.html While the ...
1
vote
1answer
3k views

Windows VPN - NO internet access

I host a network of servers behind a Fortigate 200a firewall in the DC. I connect to those servers via a VPN connection. The problem is that when i connect to the VPN, I lose my internet connection ...
2
votes
1answer
939 views

Fortinet: Is there any equivalent of the ASA's packet-tracer command?

I would like to know if there is not Fortigates an equivalent of the packet-tracer command that we can find on the ASA. Here is an example of execution for those who don't know it: NAT and pass : ...
0
votes
2answers
5k views

Fortigate 40c Firewall Configuration

Does anybody know if is it possible to Un-bridge ports on forgiate 40c? I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
2answers
6k views

Fortigate Firewall - DMZ vs Interface ports

I'm considering buying a Fortigate 50b (or Fortigate 60b) firewall to separate my web (iis) machine from the DB machine. (See http://www.fortinet.com/doc/FGT50_100DS.pdf) Till now the two servers ...
0
votes
1answer
653 views

Fortigate 310B… internal tunnelled clients can not access interal hosted sites

I have a new Fortinet firewall (310B) Internal IP is 172.16.1.7 External IP #1 is 164.58.180.210 (secondary 211-222) External IP #2 is 164.58.12.30 Internal IP is the default gateway. External is ...
1
vote
3answers
8k views

Assign CA certificate to Fortigate https WAN interface

I have a Fortigate 80C that allows remote administration via https. I access the URL and all fine but the one thing that really bugs me is that is brings up "untrusted connection" in chrome with the ...
1
vote
2answers
369 views

Remove one's domain from general spam blacklist

We've a problem similar to the question Getting a domain name off of the blacklist but the solutions posted there doesn't help. The problem I'm facing is that our domain is probably marked ...
1
vote
1answer
584 views

How does one guarantee a remote client the same local IP address every time when connecting to a VPN?

I need to configure a VPN for secure remote access to a PACS serving DICOM radiological images. The DICOM standard requires that any clients accessing the PACS must be using a fixed IP address that is ...
3
votes
3answers
635 views

Could this be a DOS attack?

I'm a bit out of me league here (we're a reasonably small firm, I'm a software dev stuck with doing sysadmin when needed), but I thought I'd ask the smart people at ServerFault about my problem before ...
3
votes
3answers
6k views

IPSec tunnel between FortiGate and iPhone / iOS - Works except for DNS / Wins

I have configured my Fortigate with a new VPN IPSec tunnel to allow the iOS Cisco client to connect. That works fine. I can RDP to my servers, browse to my servers via IP address, etc. But, the ...
0
votes
1answer
409 views

IP's from Multiple Subnets on single Firewall Interface

I have FortiGate 200A Firewall. I want to assign two IP ranges to a single DMZ interface in the firewall. And than use them in a single windows server machine. The ip address are: 72.80.206.192/27 ...
4
votes
2answers
7k views

Connect to a Fortinet VPN with Ubuntu

I don't know a lot about VPNs but I'd like to connect to a Fortinet VPN with Ubuntu. I can connect on Windows using Forticlient just by entering the policy server (vpn.theserver.com) and then it asks ...
0
votes
1answer
939 views

IPSEC tunnel Fortinet Transparent Mode to inside Fortinet firewall in NAT Mode does not respond to incomming traffic

I have 2 fortinet firewalls (fully patched); fw1 is providing an IPSEC tunnel in transparent mode. beneath this firewall is a fw2, a NAT firewall with a VIP address that has been confirmed to work. ...
0
votes
1answer
2k views

ADSL and routing (bridging) problem with DLINK 320B and Fortinet Fortigate 60

Internet <---> 320B (ADSL modem) <---> Fortigate 60 (firewall) <---> lan The ADSL line is with static IP, with username and password and with pppoa. The web interface of the DSL 320B allows ...
1
vote
2answers
579 views

What type of Firewall appliance for website co-location?

We are moving a high traffic site (20Mb/s - 80Mb/s) to a co-location instead a dedicated server at a hosting company. As part of the infrastructure build-out we are deciding between buying a FortiGate ...