Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

learn more… | top users | synonyms

0
votes
2answers
225 views

How to disconnect a forticlient VPN connection from a script?

I need to make an bash script on Linux that connects into an VPN, processes some tasks, and then disconnects. To connect to the VPN I use the forticlient ssl vpn (like fortinet but for VPN instead). ...
3
votes
1answer
581 views

UDP Packet Size.. max, ping failing to 3G.. Recalcitrant software vendor

We have a network of 330 clients (Service Vans) connected via 3G to our central office. Currently these clients are connected via a small ruggedized 3G router that establishes the 3G connection and ...
2
votes
1answer
113 views

Fortinet Ascenlink heavy packet loss

I'm working on a company with some Fortinet appliances. One of them is a Load Balancer named AscenLink. The specific model is an AscenLink AL-700. There's a insane problem: a huge packet loss on the ...
0
votes
1answer
312 views

Banning client from surfing the net

In order to implement some egress traffic filtering so that a client can only visit specific web sites only, is it possible to configure a Fortinet FGT 60B to do some IP MAC address binding? In a ...
0
votes
1answer
244 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
0
votes
1answer
3k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
0
votes
1answer
579 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
0
votes
1answer
3k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
461 views

IP's from Multiple Subnets on single Firewall Interface

I have FortiGate 200A Firewall. I want to assign two IP ranges to a single DMZ interface in the firewall. And than use them in a single windows server machine. The ip address are: 72.80.206.192/27 ...
4
votes
0answers
441 views

VLAN ID over DHCP for Management Interface of Fortinet FortiAP

When configuring the FortiAP device it's desirable to configure the VLAN ID for the tagged management network. Accordingly to the manual it's possible to do so by "telnetting" to the FortiAP device ...
1
vote
0answers
671 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
550 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
1
vote
0answers
1k views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
1
vote
0answers
23k views

Fortigate Remote VPN : no matching gateway for new request

I am trying to configure a Fortigate 60C to act as an IPSec endpoint for remote VPN. I configured it like this : SCR-F0-FGT100C-1 # diagnose vpn ike config vd: root/0 name: SCR-REMOTEVPN serial: 7 ...
0
votes
0answers
12 views

fortimail antispam has blacklisted the internal exchange mail server address

i have an exchange server for which i wanted to redirect outbound messages throught a fortimail antispam box. i created a new send connector for a test domain and used the ip of the antispam as the ...
0
votes
0answers
55 views

IPSec VPN between Fortigate 5.2 and Linux with ipsec-tools - data does not pass

We have an IPSec VPN tunnel between Fortigate device and Linux box running racoon and ipsec-tools. The setup worked in Fortigate 4.X, but with 5.2 the SAs are negotiated OK and no traffic can be ...
0
votes
0answers
23 views

Obtaining an IP from a DHCP server that is reachable through VPN

I have a Windows 2012 Server running on Hyper-V (also on VMWare and VirtualBox)at home. I connect my Windows 10 to my work place using VPN (Forti), is there a way to configure my Windows 2012 server ...
0
votes
0answers
50 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
0
votes
0answers
158 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
0
votes
0answers
299 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
0
votes
0answers
1k views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
0
votes
0answers
2k views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following http://docs-legacy.fortinet.com/cb/html/index.html#page/...
0
votes
0answers
559 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...