Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

learn more… | top users | synonyms

3
votes
1answer
466 views

UDP Packet Size.. max, ping failing to 3G.. Recalcitrant software vendor

We have a network of 330 clients (Service Vans) connected via 3G to our central office. Currently these clients are connected via a small ruggedized 3G router that establishes the 3G connection and ...
2
votes
1answer
3k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
1
vote
1answer
1k views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
1
vote
1answer
938 views

Get external public ip from command line in fortinet

Is there any way to know the public ip address of a fortinet? There are many services such as icanhazip.com that tell you the current ip. In linux, I would just run: curl http://icanhazip.com How ...
0
votes
1answer
69 views

Banning client from surfing the net

In order to implement some egress traffic filtering so that a client can only visit specific web sites only, is it possible to configure a Fortinet FGT 60B to do some IP MAC address binding? In a ...
0
votes
1answer
77 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
0
votes
1answer
2k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
0
votes
1answer
366 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
0
votes
1answer
3k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
422 views

IP's from Multiple Subnets on single Firewall Interface

I have FortiGate 200A Firewall. I want to assign two IP ranges to a single DMZ interface in the firewall. And than use them in a single windows server machine. The ip address are: 72.80.206.192/27 ...
2
votes
0answers
22 views

Fortinet Ascenlink heavy packet loss

I'm working on a company with some Fortinet appliances. One of them is a Load Balancer named AscenLink. The specific model is an AscenLink AL-700. There's a insane problem: a huge packet loss on the ...
1
vote
0answers
99 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
632 views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
0
votes
0answers
56 views

Forward ports Fotigate, multiple ports

I need a you guys help. I can not solve , I need ideas . I am implementing a FortiGate 140, my difficulty being to perform port forwarding , I need make redirecting a ip in the case . example : ...
0
votes
0answers
32 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
0
votes
0answers
223 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
0
votes
0answers
236 views

Fortinet static nat

I have been doing fortinet's since 2009, so I kind of know my way around the box... I'm just got another I setup this evening, a 200D, with the latest fortiOS 5.2. It seems they still do not have a ...
0
votes
0answers
77 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
0
votes
0answers
185 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
0
votes
0answers
802 views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
0
votes
0answers
1k views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following ...
0
votes
0answers
361 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...