1
vote
1answer
61 views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
0
votes
1answer
629 views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
1answer
1k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
3k views

Fortinet multiple WAN IP to several ports

I have a 5 public IP address range. (ie: 1.1.1.1 to 1.1.1.5) I would like to assign the first to port 1 transparently in a way that a VPN router (RV082) could connect via it and respond ...
1
vote
2answers
2k views

Send Magic packet from Fortinet Firewall

Is it possible to send a magic packet (WOL) from a fortinet firewall? I read the manual but couldn't find anything, just wondering if anyone achieved something similar. I'm connecting through an ...
0
votes
0answers
503 views

Network Segmentation - router, switches, or both?

I'm just looking for advice/best practices on how to properly segment my network with the goal of it being as secure as possible, but also easy to manage. Currently, the network is flat and almost ...
1
vote
2answers
1k views

Destination Based Routing with Fortigate 60B Firewall

First let me start off that I'm not very knowledgeable when it comes to networking so some terms what not may be over my head. I just know enough to get around. So all traffic goes through the WAN 1 ...
0
votes
1answer
16k views

Fortigate Remote VPN : no matching gateway for new request

I am trying to configure a Fortigate 60C to act as an IPSec endpoint for remote VPN. I configured it like this : SCR-F0-FGT100C-1 # diagnose vpn ike config vd: root/0 name: SCR-REMOTEVPN serial: 7 ...
2
votes
1answer
575 views

Check what the average packet size is in a network (what firewall/router should I get)

Is there any way to do this? We are looking into buying a Fortigate 100D but are unsure if it will hold up to our requirements. http://www.fortinet.com/products/fortigate/100D.html While the ...
2
votes
1answer
849 views

Fortinet: Is there any equivalent of the ASA's packet-tracer command?

I would like to know if there is not Fortigates an equivalent of the packet-tracer command that we can find on the ASA. Here is an example of execution for those who don't know it: NAT and pass : ...
0
votes
2answers
4k views

Fortigate 40c Firewall Configuration

Does anybody know if is it possible to Un-bridge ports on forgiate 40c? I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
2answers
5k views

Fortigate Firewall - DMZ vs Interface ports

I'm considering buying a Fortigate 50b (or Fortigate 60b) firewall to separate my web (iis) machine from the DB machine. (See http://www.fortinet.com/doc/FGT50_100DS.pdf) Till now the two servers ...
0
votes
1answer
634 views

Fortigate 310B… internal tunnelled clients can not access interal hosted sites

I have a new Fortinet firewall (310B) Internal IP is 172.16.1.7 External IP #1 is 164.58.180.210 (secondary 211-222) External IP #2 is 164.58.12.30 Internal IP is the default gateway. External is ...
1
vote
2answers
344 views

Remove one's domain from general spam blacklist

We've a problem similar to the question Getting a domain name off of the blacklist but the solutions posted there doesn't help. The problem I'm facing is that our domain is probably marked ...
0
votes
1answer
402 views

IP's from Multiple Subnets on single Firewall Interface

I have FortiGate 200A Firewall. I want to assign two IP ranges to a single DMZ interface in the firewall. And than use them in a single windows server machine. The ip address are: 72.80.206.192/27 ...
0
votes
1answer
909 views

IPSEC tunnel Fortinet Transparent Mode to inside Fortinet firewall in NAT Mode does not respond to incomming traffic

I have 2 fortinet firewalls (fully patched); fw1 is providing an IPSEC tunnel in transparent mode. beneath this firewall is a fw2, a NAT firewall with a VIP address that has been confirmed to work. ...