Questions tagged [fortinet]

Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

Filter by
Sorted by
Tagged with
0
votes
0answers
29 views

Connecting to a FortiGate VPN through docker and macos

I need to create a docker based solution in order to connect to a remote host via VPN. The only way in macOS seems creating a virtual machine acting as gateway to the VPN. macOS --> VM + docker ...
0
votes
0answers
40 views

FortiManager overwrites settings on HA unicast heartbeat interface

I have an HA cluster of two FortiGates (v6.0.9) managed by a FortiManager (v6.0.8). The FortiGates run in a cloud, so I must use unicast heartbeat on HA interfaces to sync them. I use port10 on both ...
0
votes
0answers
10 views

fortigate external captive with radius server

so far i've been tried,i ve been make radius server on data center and make auth. web server too. i ve been build web auth. and worked with my radius server. i want to make my ip(web auth) as an ...
0
votes
2answers
61 views

Can SMTP retries come from different IP addresses?

I have a FortiMail with Greylisting turned on. The idea is that only after a valid SMTP retry, an email will get released. However, it appears that for a large email provider like outlook.com, ...
3
votes
1answer
162 views

Connecting a Nest Camera to Aruba Access Points (APs) backed by a Fortinet Firewall

I am having trouble connecting my Nest cameras to my network. I am running Aruba 300 series Access Points and a Fortinet firewall (which is doing the routing). The Nest cameras never connect, and ...
0
votes
0answers
1k views

Fortigate 100D firmware upgrade

model: Fortigate 100D firmware version: v5.0,build0128 I intend to upgrade to FortiOS 5.4.4 build 1117 (FGT_100D-v5-build1117-FORTINET.out) Support has expired so am concerned about any gotchas in ...
0
votes
1answer
159 views

Systematically Remove an Internet Connection

We are about to deploy FortiNet FortiClient VPN to our end users however we're running into one small snag. During the installation it also creates a dial-up connection which appears in the WiFi pup-...
0
votes
0answers
2k views

External Captive portal with fortigate Firewall

I working on external captive portal for fortigate firewall I followed this tutorial to config my fortigate with external captive portal http://cookbook.fortinet.com/using-an-external-captive-portal-...
1
vote
2answers
11k views

LACP Trunk from Cisco to Fortinet

I am setting up a 2 ethernet trunk between a Cisco switch and Fortinet 100E firewall. So far the below is working (i can ping from Cisco 192.168.1.2 and get replies from the Fortinet 192.168.1.1): ...
1
vote
1answer
157 views

Active Directory not keeping RDP alive in log so FW can allow internet

I have a Fortinet firewall that looks at my AD to recognize my domain users to grant access to the internet and for the most part it works perfectly except for when users remote into computers from ...
0
votes
1answer
37 views

using VPN IP Address

I use FotreClient to VPN to my company Previously I was getting same IP address as i am in the company after few changes to the server and upgrading ForteClient now when I VPN to the company I still ...
1
vote
1answer
148 views

Ip Configuration in Fortigate 60d

I have a fortigate 60d which bought around 3-4 years ago. Today i tried to install over of fiber internet. I connected my forti with 192.168.3.1 then i clicked wizard and entered new values and new ip ...
3
votes
0answers
2k views

Set outgoing interface on Fortigate explicit proxy

I am testing the explicit proxy on a Fortigate 200D firmware 5.4 WAN1 and WAN2 are both members of the wan load balancer interface. I need to set the proxy to use WAN1 but it it is defaulting to ...
1
vote
1answer
492 views

Possible to dump sflow data to pcap format?

I want to get the packet capture from fortiet/fortigate device, to capture all traffic from it on one of its interface. For it i have enabled sflow and sent it to another ntopng server. but on ntopng ,...
3
votes
2answers
7k views

Fortinet SSL VPN Client Setup Without GUI on Linux (Ubuntu)

When I use ./forticlientsslvpn_cli --server 172.17.97.85:10443 --vpnuser forti to connect to the vpn, (using Forticlient SSLVPN 4.4.2329-1 64bit & Forticlient SSLVPN 4.4.2327-2 64bit) it shows ...
0
votes
1answer
2k views

Issues with DMZ on Fortigate 90D, second router can't reach internet

I am having issues setting up a DMZ port on my Firewall (hardware router). I am also assuming this belongs in Super User, as it seems like a basic DMZ setup. Here is the setup: I have a Fortigate 90D ...
0
votes
1answer
1k views

fortimail antispam has blacklisted the internal exchange mail server address

i have an exchange server for which i wanted to redirect outbound messages throught a fortimail antispam box. i created a new send connector for a test domain and used the ip of the antispam as the ...
1
vote
2answers
2k views

How to disconnect a forticlient VPN connection from a script?

I need to make an bash script on Linux that connects into an VPN, processes some tasks, and then disconnects. To connect to the VPN I use the forticlient ssl vpn (like fortinet but for VPN instead). ...
10
votes
8answers
22k views

How to get forticlient working in OSX El Capitan

The forticlient VPN software is borked, when using split horizon, since OSX El Capitan. The problem is that DNS requests are sent out on the normal primary interface to the DNS of the VPN tunnel. How ...
1
vote
1answer
524 views

Use a physical cryptographic token with OpenVPN community (free) version

I am currently setting up OpenVPN to provide company access to multiple clients. Our requirement is to use certificates, password protect the client keys, as well as using dual factor (MFA) ...
4
votes
0answers
2k views

VLAN ID over DHCP for Management Interface of Fortinet FortiAP

When configuring the FortiAP device it's desirable to configure the VLAN ID for the tagged management network. Accordingly to the manual it's possible to do so by "telnetting" to the FortiAP device ...
2
votes
1answer
564 views

Fortinet Ascenlink heavy packet loss

I'm working on a company with some Fortinet appliances. One of them is a Load Balancer named AscenLink. The specific model is an AscenLink AL-700. There's a insane problem: a huge packet loss on the ...
1
vote
1answer
1k views

Banning client from surfing the net

In order to implement some egress traffic filtering so that a client can only visit specific web sites only, is it possible to configure a Fortinet FGT 60B to do some IP MAC address binding? In a ...
1
vote
0answers
2k views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to activate ...
0
votes
1answer
103 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
1
vote
0answers
1k views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
2
votes
1answer
12k views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
0
votes
1answer
648 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
1
vote
1answer
3k views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
1
vote
5answers
15k views

Get external public ip from command line in fortinet

Is there any way to know the public ip address of a fortinet? There are many services such as icanhazip.com that tell you the current ip. In linux, I would just run: curl http://icanhazip.com How ...
0
votes
0answers
261 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
0
votes
0answers
500 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
1
vote
1answer
5k views

How to disable SSL-VPN on FortiOS 5.0

Hearbleed issue. Must disable SSL-VPN. I wasnt able to find it in the GUI. Might there happen to be a CLI command?
0
votes
1answer
5k views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
0answers
2k views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following http://docs-legacy.fortinet.com/cb/html/index.html#page/...
0
votes
1answer
655 views

ScreenOS Failover tunnel

I have a route-based vpn from my site (Netscreen204) to a customer site (Fortinet) . They want a second, backup tunnel in case of failure, and will be using the Fortune there too. The only thing I ...
0
votes
0answers
835 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
0
votes
2answers
5k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
0
votes
1answer
827 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
4
votes
1answer
5k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
1answer
4k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
13k views

Fortinet multiple WAN IP to several ports

I have a 5 public IP address range. (ie: 1.1.1.1 to 1.1.1.5) I would like to assign the first to port 1 transparently in a way that a VPN router (RV082) could connect via it and respond transparently....
0
votes
4answers
61k views

Fortigate bandwidth monitoring

I have a Fortigate 200B with Forti OS 5.0. How can I watch the total bandwidth being used by my unit both incoming and outgoing? Thanks
0
votes
1answer
2k views

Fortinet FortiWifi 20C Reset

I've tried multiple times to reset the login on our router, 5 seconds on the reset button, 30 seconds on the reset button, power cycle. No matter what I google and do, I can't seem to get this thing ...
5
votes
7answers
146k views

Fortigate VPN client “Unable to logon to the server. Your username or password may not be properly configured for this connection. (-12)”

We're running a Fortigate 100D, and having some trouble with the SSL VPN via FortiClient. I installed FortiClient on an external Windows 7 PC a few days pack and the SSL VPN connected and worked. I ...
2
votes
2answers
12k views

Network Tap (SPAN port) on FortiGate 100D (FortiOS 4.0MR3)

I'm dealing with a FortiGate 100D for the first time, and am scratching my head as there doesn't seem to be an easy way to mirror ports in the switch; which is really a facility that I presumed it ...
1
vote
0answers
2k views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
4
votes
3answers
31k views

FortiGate IPsec VPN: Configuring Multiple Phase 2 Connections (Multiple Subnets)

I am trying to make an IPsec connection to a FortiGate router using OpenSwan. The FortiGate sits on two distinct subnets and I need to access both of them. In the FortiGate I have defined one Phase 1 ...
0
votes
1answer
6k views

Fortigate + HP ProCurve Load Balancing

I have a FortiGate 100D + HP ProCurve 2824 linked together by 4x 1Gb links. The ProCurve is configured to have ports 21-24 trunked together and load balance them. The 4 cables from these ports are ...
1
vote
2answers
11k views

Send Magic packet from Fortinet Firewall

Is it possible to send a magic packet (WOL) from a fortinet firewall? I read the manual but couldn't find anything, just wondering if anyone achieved something similar. I'm connecting through an ...