Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

learn more… | top users | synonyms

0
votes
2answers
63 views

How to disconnect a forticlient VPN connection from a script?

I need to make an bash script on Linux that connects into an VPN, processes some tasks, and then disconnects. To connect to the VPN I use the forticlient ssl vpn (like fortinet but for VPN instead). ...
3
votes
1answer
553 views

UDP Packet Size.. max, ping failing to 3G.. Recalcitrant software vendor

We have a network of 330 clients (Service Vans) connected via 3G to our central office. Currently these clients are connected via a small ruggedized 3G router that establishes the 3G connection and ...
2
votes
1answer
88 views

Fortinet Ascenlink heavy packet loss

I'm working on a company with some Fortinet appliances. One of them is a Load Balancer named AscenLink. The specific model is an AscenLink AL-700. There's a insane problem: a huge packet loss on the ...
0
votes
1answer
188 views

Banning client from surfing the net

In order to implement some egress traffic filtering so that a client can only visit specific web sites only, is it possible to configure a Fortinet FGT 60B to do some IP MAC address binding? In a ...
0
votes
1answer
175 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
0
votes
1answer
3k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
0
votes
1answer
505 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
0
votes
1answer
3k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
450 views

IP's from Multiple Subnets on single Firewall Interface

I have FortiGate 200A Firewall. I want to assign two IP ranges to a single DMZ interface in the firewall. And than use them in a single windows server machine. The ip address are: 72.80.206.192/27 ...
4
votes
0answers
270 views

VLAN ID over DHCP for Management Interface of Fortinet FortiAP

When configuring the FortiAP device it's desirable to configure the VLAN ID for the tagged management network. Accordingly to the manual it's possible to do so by "telnetting" to the FortiAP device ...
1
vote
0answers
482 views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to ...
1
vote
0answers
443 views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
1
vote
0answers
892 views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
0
votes
0answers
45 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
0
votes
0answers
138 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
0
votes
0answers
273 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
0
votes
0answers
1k views

Is it possible to configure L2TP IPSec connection on a Fortigate 30D?

We've got a FortiGate-30D running v5.0,build4225,130521 (GA). I've managed to configure Cisco IPsec VPN and Web-SSL, and tested both, but I'm unable to configure the L2TP IPSec VPN. Looking at the ...
0
votes
0answers
2k views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following ...
0
votes
0answers
479 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...