Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [fortinet]

Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

Filter by
Sorted by
Tagged with
0 votes
0 answers
98 views

Fortigate VPN for some users: "Unable to logon to the server. Username or password may not be properly configured for this connection. (-12)"

We are using a Fortigate 60F, to which we usually connect to VPN using the Forticlient app. Everything used to work fine, but for the last two or three days, we have two users that cannot connect and ...
user avatar
0 votes
0 answers
41 views

Fortigate Proxy based on Path(Reverse Proxy)

I'm running a service, which up to today, I have consumed subdomains from my main domain for each customer to reach to their servers as below. e.g: cust1.mydomain.com ---> Proxy to customer1 ...
user avatar
0 votes
0 answers
24 views

how to add the expnded subnet mask for a private ip configuration in fortigate firewall

I have been using fortigate firewall and the subnet mask is 255.255.224.0. Now, our cloud provider are assigning new expanded ip pool subnet mask for the servers. that is 255.255.192.0 . So, How to ...
user avatar
0 votes
1 answer
74 views

Execute sequence of commands in fortinet

I would like to execute three commands in a fortinet firewall, the commands are: #To enter in the config mode: config vdom #To select the virtual domain: edit "name" #To see the info I want: ...
user avatar
0 votes
1 answer
135 views

Connect to en /ext host of Fortinet VPN with Ubuntu

I have used openfrotivpn many times but I have never been able to properly configure such a vpn in the network manager. Unfortunately, now I have to connect to host [some ip]/ext (e.x. 192.168.10.10/...
user avatar
4 votes
2 answers
657 views

2 Different Public Address for High Availability

this is my first time asking a question here, and I was wondering is it possible to have two different ISP public IPs connected to a single system for high availability? for example, if our ISP 1 ...
user avatar
2 votes
1 answer
90 views

Azure run command for Fortinet virtual machine with serial console?

I'm trying to execute with Azure a .conf file that has some command lines that are executable into the Fortinet's serial console in a virtual machine with FortiOS v6.4.3 (Linux based system). I use AZ ...
user avatar
2 votes
0 answers
246 views

Fortigate and RADIUS Wifi authentication for domain and non-domain devices

We're setting up RADIUS authentication for wireless network connections through a Windows Server 2012 R2 (NPS). We have to allow both domain computers (registered in Active directory) and non-domain ...
user avatar
0 votes
0 answers
92 views

Cannot find FortiShield service via Get-Service, net start

I've recently installed the FortiNet client and wanted to see what the "fortishield" service is. The weird thing is, I'm able to stop it and start it, but I cannot see it in the output of ...
user avatar
-1 votes
1 answer
173 views

Email Two-Factor Authentication on FortiGate

I'm currently implementing Multi-Factor Authentication on FortiGate, using mailer system and refer to this document link. There is no options to change the subject or content of email, because ...
user avatar
  • 99
0 votes
1 answer
77 views

How can I set Forti VPN so that http/https are not using VPN Xubuntu?

I need to browse (ie, HTTP/HTTPS) and at the same time connected to remote network via VPN (for ssh, which works fine). Maybe my HTTP/HTTPS request are sent till remote VPN network and then got ...
user avatar
  • 101
0 votes
2 answers
152 views

Can SMTP retries come from different IP addresses?

I have a FortiMail with Greylisting turned on. The idea is that only after a valid SMTP retry, an email will get released. However, it appears that for a large email provider like outlook.com, ...
user avatar
  • 504
3 votes
1 answer
411 views

Connecting a Nest Camera to Aruba Access Points (APs) backed by a Fortinet Firewall

I am having trouble connecting my Nest cameras to my network. I am running Aruba 300 series Access Points and a Fortinet firewall (which is doing the routing). The Nest cameras never connect, and ...
user avatar
0 votes
0 answers
2k views

Fortigate 100D firmware upgrade

model: Fortigate 100D firmware version: v5.0,build0128 I intend to upgrade to FortiOS 5.4.4 build 1117 (FGT_100D-v5-build1117-FORTINET.out) Support has expired so am concerned about any gotchas in ...
user avatar
  • 43
0 votes
1 answer
274 views

Systematically Remove an Internet Connection

We are about to deploy FortiNet FortiClient VPN to our end users however we're running into one small snag. During the installation it also creates a dial-up connection which appears in the WiFi pup-...
user avatar
0 votes
0 answers
3k views

External Captive portal with fortigate Firewall

I working on external captive portal for fortigate firewall I followed this tutorial to config my fortigate with external captive portal http://cookbook.fortinet.com/using-an-external-captive-portal-...
user avatar
2 votes
2 answers
16k views

LACP Trunk from Cisco to Fortinet

I am setting up a 2 ethernet trunk between a Cisco switch and Fortinet 100E firewall. So far the below is working (i can ping from Cisco 192.168.1.2 and get replies from the Fortinet 192.168.1.1): ...
user avatar
  • 1,120
1 vote
1 answer
369 views

Active Directory not keeping RDP alive in log so FW can allow internet

I have a Fortinet firewall that looks at my AD to recognize my domain users to grant access to the internet and for the most part it works perfectly except for when users remote into computers from ...
user avatar
0 votes
1 answer
43 views

using VPN IP Address

I use FotreClient to VPN to my company Previously I was getting same IP address as i am in the company after few changes to the server and upgrading ForteClient now when I VPN to the company I still ...
user avatar
  • 101
1 vote
1 answer
160 views

Ip Configuration in Fortigate 60d

I have a fortigate 60d which bought around 3-4 years ago. Today i tried to install over of fiber internet. I connected my forti with 192.168.3.1 then i clicked wizard and entered new values and new ip ...
user avatar
3 votes
0 answers
2k views

Set outgoing interface on Fortigate explicit proxy

I am testing the explicit proxy on a Fortigate 200D firmware 5.4 WAN1 and WAN2 are both members of the wan load balancer interface. I need to set the proxy to use WAN1 but it it is defaulting to ...
user avatar
  • 15.4k
1 vote
1 answer
678 views

Possible to dump sflow data to pcap format?

I want to get the packet capture from fortiet/fortigate device, to capture all traffic from it on one of its interface. For it i have enabled sflow and sent it to another ntopng server. but on ntopng ,...
user avatar
  • 4,180
5 votes
2 answers
11k views

Fortinet SSL VPN Client Setup Without GUI on Linux (Ubuntu)

When I use ./forticlientsslvpn_cli --server 172.17.97.85:10443 --vpnuser forti to connect to the vpn, (using Forticlient SSLVPN 4.4.2329-1 64bit & Forticlient SSLVPN 4.4.2327-2 64bit) it shows ...
user avatar
0 votes
1 answer
2k views

Issues with DMZ on Fortigate 90D, second router can't reach internet

I am having issues setting up a DMZ port on my Firewall (hardware router). I am also assuming this belongs in Super User, as it seems like a basic DMZ setup. Here is the setup: I have a Fortigate 90D ...
user avatar
  • 101
0 votes
1 answer
1k views

fortimail antispam has blacklisted the internal exchange mail server address

i have an exchange server for which i wanted to redirect outbound messages throught a fortimail antispam box. i created a new send connector for a test domain and used the ip of the antispam as the ...
user avatar
  • 454
1 vote
2 answers
5k views

How to disconnect a forticlient VPN connection from a script?

I need to make an bash script on Linux that connects into an VPN, processes some tasks, and then disconnects. To connect to the VPN I use the forticlient ssl vpn (like fortinet but for VPN instead). ...
user avatar
  • 11
10 votes
8 answers
26k views

How to get forticlient working in OSX El Capitan

The forticlient VPN software is borked, when using split horizon, since OSX El Capitan. The problem is that DNS requests are sent out on the normal primary interface to the DNS of the VPN tunnel. How ...
user avatar
  • 401
1 vote
1 answer
668 views

Use a physical cryptographic token with OpenVPN community (free) version

I am currently setting up OpenVPN to provide company access to multiple clients. Our requirement is to use certificates, password protect the client keys, as well as using dual factor (MFA) ...
user avatar
  • 1,021
4 votes
0 answers
2k views

VLAN ID over DHCP for Management Interface of Fortinet FortiAP

When configuring the FortiAP device it's desirable to configure the VLAN ID for the tagged management network. Accordingly to the manual it's possible to do so by "telnetting" to the FortiAP device ...
user avatar
2 votes
1 answer
646 views

Fortinet Ascenlink heavy packet loss

I'm working on a company with some Fortinet appliances. One of them is a Load Balancer named AscenLink. The specific model is an AscenLink AL-700. There's a insane problem: a huge packet loss on the ...
user avatar
1 vote
1 answer
1k views

Banning client from surfing the net

In order to implement some egress traffic filtering so that a client can only visit specific web sites only, is it possible to configure a Fortinet FGT 60B to do some IP MAC address binding? In a ...
user avatar
  • 11
1 vote
0 answers
2k views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to activate ...
user avatar
  • 121
0 votes
1 answer
105 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
user avatar
1 vote
0 answers
1k views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
user avatar
  • 145
2 votes
1 answer
13k views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
user avatar
  • 107
0 votes
1 answer
768 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
user avatar
  • 357
1 vote
1 answer
3k views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
user avatar
  • 15.4k
2 votes
8 answers
24k views

Get external public IP from command line in Fortinet

Is there any way to know the public IP address of a Fortinet? There are many services such as icanhazip.com that tell you the current IP. In Linux, I would just run: curl http://icanhazip.com How ...
user avatar
  • 688
0 votes
0 answers
267 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
user avatar
  • 256
0 votes
0 answers
512 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
user avatar
  • 85
1 vote
1 answer
7k views

How to disable SSL-VPN on FortiOS 5.0

Hearbleed issue. Must disable SSL-VPN. I wasnt able to find it in the GUI. Might there happen to be a CLI command?
user avatar
  • 629
0 votes
1 answer
6k views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
user avatar
  • 375
0 votes
0 answers
2k views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following http://docs-legacy.fortinet.com/cb/html/index.html#page/...
user avatar
0 votes
1 answer
663 views

ScreenOS Failover tunnel

I have a route-based vpn from my site (Netscreen204) to a customer site (Fortinet) . They want a second, backup tunnel in case of failure, and will be using the Fortune there too. The only thing I ...
user avatar
0 votes
0 answers
933 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
user avatar
  • 629
0 votes
2 answers
5k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
user avatar
0 votes
1 answer
885 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
user avatar
  • 629
4 votes
1 answer
5k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
user avatar
  • 629
0 votes
1 answer
4k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
user avatar
0 votes
1 answer
14k views

Fortinet multiple WAN IP to several ports

I have a 5 public IP address range. (ie: 1.1.1.1 to 1.1.1.5) I would like to assign the first to port 1 transparently in a way that a VPN router (RV082) could connect via it and respond transparently....
user avatar
  • 135