Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

learn more… | top users | synonyms

3
votes
1answer
373 views

UDP Packet Size.. max, ping failing to 3G.. Recalcitrant software vendor

We have a network of 330 clients (Service Vans) connected via 3G to our central office. Currently these clients are connected via a small ruggedized 3G router that establishes the 3G connection and ...
2
votes
1answer
2k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
1
vote
1answer
104 views

Get external public ip from command line in fortinet

Is there any way to know the public ip address of a fortinet? There are many services such as icanhazip.com that tell you the current ip. In linux, I would just run: curl http://icanhazip.com How ...
0
votes
1answer
15 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
0
votes
1answer
207 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
0
votes
1answer
2k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
403 views

IP's from Multiple Subnets on single Firewall Interface

I have FortiGate 200A Firewall. I want to assign two IP ranges to a single DMZ interface in the firewall. And than use them in a single windows server machine. The ip address are: 72.80.206.192/27 ...
1
vote
0answers
466 views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
0
votes
0answers
52 views

Fortinet static nat

I have been doing fortinet's since 2009, so I kind of know my way around the box... I'm just got another I setup this evening, a 200D, with the latest fortiOS 5.2. It seems they still do not have a ...
0
votes
0answers
36 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
0
votes
0answers
59 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
0
votes
0answers
492 views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
0
votes
0answers
700 views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following ...
0
votes
0answers
203 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
0
votes
0answers
965 views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
0
votes
0answers
516 views

Network Segmentation - router, switches, or both?

I'm just looking for advice/best practices on how to properly segment my network with the goal of it being as secure as possible, but also easy to manage. Currently, the network is flat and almost ...