Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [fortinet]

Fortinet is a vendor for security appliances, e.g. the FortiGate firewall.

0
votes
0answers
7 views

Why are FireFox, IE11 and Safari extremely slow on a core 2.2 site on IIS behind a firewall?

We have a .Net Core 2.2 razor pages site hosted on IIS, behind a Fortiweb firewall. It works fine on Chrome and Edge. when accessed with Firefox, IE11 or Safari , page redirects (302) take up to 2 ...
3
votes
1answer
45 views

Connecting a Nest Camera to Aruba Access Points (APs) backed by a Fortinet Firewall

I am having trouble connecting my Nest cameras to my network. I am running Aruba 300 series Access Points and a Fortinet firewall (which is doing the routing). The Nest cameras never connect, and ...
0
votes
0answers
439 views

Fortigate 100D firmware upgrade

model: Fortigate 100D firmware version: v5.0,build0128 I intend to upgrade to FortiOS 5.4.4 build 1117 (FGT_100D-v5-build1117-FORTINET.out) Support has expired so am concerned about any gotchas in ...
0
votes
1answer
143 views

Systematically Remove an Internet Connection

We are about to deploy FortiNet FortiClient VPN to our end users however we're running into one small snag. During the installation it also creates a dial-up connection which appears in the WiFi pup-...
0
votes
0answers
271 views

How to enforce Fortigate policy on FortiClient connected to FortiTelemetry?

My company is running a Fortigate 300E (FortiOS 5.6.2) at the office, licensed for FortiClient "Endpoint Telemetry & Compliance License Subscription for up to 600 clients"). A good number of our ...
0
votes
0answers
36 views

connect to fortigate using FTPS

Hello I using fortigate 60 D and I want to download and upldoad file from/to it using ftp client like filezella program but the connection is time out . please help me how can I do that ?
0
votes
0answers
110 views

External Captive portal for fortigate firewall

I am so sorry because I asking here about fortigate I working on external captive portal captive portal and every things go fine but when user inserted wrong username or password he must get new ...
0
votes
0answers
713 views

External Captive portal with fortigate Firewall

I working on external captive portal for fortigate firewall I followed this tutorial to config my fortigate with external captive portal http://cookbook.fortinet.com/using-an-external-captive-portal-...
0
votes
0answers
476 views

Error and logout page in external captive portal fortigate firewall

hello I wish to have answer here I working on fortigate external captive portal and I using this tutorial http://cookbook.fortinet.com/using-an-external-captive-portal-for-wifi-security/ my ...
1
vote
2answers
5k views

LACP Trunk from Cisco to Fortinet

I am setting up a 2 ethernet trunk between a Cisco switch and Fortinet 100E firewall. So far the below is working (i can ping from Cisco 192.168.1.2 and get replies from the Fortinet 192.168.1.1): ...
1
vote
1answer
59 views

Active Directory not keeping RDP alive in log so FW can allow internet

I have a Fortinet firewall that looks at my AD to recognize my domain users to grant access to the internet and for the most part it works perfectly except for when users remote into computers from ...
0
votes
0answers
40 views

Total internet data usage in a small network

We have got a small network with 20-30 Windows systems that is connected through a Fortinet Fortigate Firewall with an LTE Internet Connection that has the speed of 20 Mbps. Basically, my question ...
0
votes
1answer
32 views

using VPN IP Address

I use FotreClient to VPN to my company Previously I was getting same IP address as i am in the company after few changes to the server and upgrading ForteClient now when I VPN to the company I still ...
1
vote
1answer
120 views

Ip Configuration in Fortigate 60d

I have a fortigate 60d which bought around 3-4 years ago. Today i tried to install over of fiber internet. I connected my forti with 192.168.3.1 then i clicked wizard and entered new values and new ip ...
0
votes
0answers
409 views

sonicwall-fortinet site-to-site vpn

I'm configuring Sonicwall to Fortinet Site-to-Site IPSec VPN for the first time. Sonicwall is at HQ office, which has 3 subnets: 192.168.10.0/24 192.168.19.0/24 192.168.20.0/24 Fortinet is at ...
3
votes
0answers
1k views

Set outgoing interface on Fortigate explicit proxy

I am testing the explicit proxy on a Fortigate 200D firmware 5.4 WAN1 and WAN2 are both members of the wan load balancer interface. I need to set the proxy to use WAN1 but it it is defaulting to ...
1
vote
1answer
310 views

Possible to dump sflow data to pcap format?

I want to get the packet capture from fortiet/fortigate device, to capture all traffic from it on one of its interface. For it i have enabled sflow and sent it to another ntopng server. but on ntopng ,...
3
votes
2answers
5k views

Fortinet SSL VPN Client Setup Without GUI on Linux (Ubuntu)

When I use ./forticlientsslvpn_cli --server 172.17.97.85:10443 --vpnuser forti to connect to the vpn, (using Forticlient SSLVPN 4.4.2329-1 64bit & Forticlient SSLVPN 4.4.2327-2 64bit) it shows ...
0
votes
1answer
1k views

Issues with DMZ on Fortigate 90D, second router can't reach internet

I am having issues setting up a DMZ port on my Firewall (hardware router). I am also assuming this belongs in Super User, as it seems like a basic DMZ setup. Here is the setup: I have a Fortigate 90D ...
0
votes
1answer
743 views

fortimail antispam has blacklisted the internal exchange mail server address

i have an exchange server for which i wanted to redirect outbound messages throught a fortimail antispam box. i created a new send connector for a test domain and used the ip of the antispam as the ...
0
votes
0answers
82 views

Obtaining an IP from a DHCP server that is reachable through VPN

I have a Windows 2012 Server running on Hyper-V (also on VMWare and VirtualBox)at home. I connect my Windows 10 to my work place using VPN (Forti), is there a way to configure my Windows 2012 server ...
1
vote
2answers
1k views

How to disconnect a forticlient VPN connection from a script?

I need to make an bash script on Linux that connects into an VPN, processes some tasks, and then disconnects. To connect to the VPN I use the forticlient ssl vpn (like fortinet but for VPN instead). ...
10
votes
8answers
14k views

How to get forticlient working in OSX El Capitan

The forticlient VPN software is borked, when using split horizon, since OSX El Capitan. The problem is that DNS requests are sent out on the normal primary interface to the DNS of the VPN tunnel. How ...
1
vote
1answer
353 views

Use a physical cryptographic token with OpenVPN community (free) version

I am currently setting up OpenVPN to provide company access to multiple clients. Our requirement is to use certificates, password protect the client keys, as well as using dual factor (MFA) ...
4
votes
0answers
1k views

VLAN ID over DHCP for Management Interface of Fortinet FortiAP

When configuring the FortiAP device it's desirable to configure the VLAN ID for the tagged management network. Accordingly to the manual it's possible to do so by "telnetting" to the FortiAP device ...
2
votes
1answer
431 views

Fortinet Ascenlink heavy packet loss

I'm working on a company with some Fortinet appliances. One of them is a Load Balancer named AscenLink. The specific model is an AscenLink AL-700. There's a insane problem: a huge packet loss on the ...
0
votes
1answer
984 views

Banning client from surfing the net

In order to implement some egress traffic filtering so that a client can only visit specific web sites only, is it possible to configure a Fortinet FGT 60B to do some IP MAC address binding? In a ...
1
vote
0answers
1k views

Fortigate 60D - Empty log and report

Environment: Fortigate 60D Forti OS 5.0 I can not see any log or report in the firewall. I have already activated forticloud and I recieve empty reports. Is there something that we have to activate ...
0
votes
1answer
99 views

Fortinet as intermediate router

I have the next scenario: FG1(LAN A) <--IPSEC--> FG2(LAN B) <--IPSEC--> FG3(LAN C) Basically I need that "LAN A" reach "LAN C" through FG2, I've tried with "router policy" and "router ...
1
vote
0answers
1k views

Dynamic IP Blocking on FORTIGATE 200A Firewall

I have FORTIGATE 200A firewall protecting a IIS Server running a ASP.NET website (windows server 2008 and IIS7) I'm not familiar with Fortigate configurations and options. I recently had "attacks" ...
2
votes
1answer
10k views

Fortigate IPSEC VPN Issue

Have a challenging question here. We have a Fortigate 620B which we're trying to use to route some traffic over a VPN tunnel to a customer. We want the traffic to go out of our interface with one of ...
0
votes
1answer
543 views

PXE-T00 filename too long

I'm using a fortinet router as the dhcp server, I have option 67 defined as pxelinux.0 in hexa, it works fine for VMs and my own computer, they boot on PXE just fine. Now I have an other computer I'd ...
1
vote
1answer
3k views

Avoiding split brain DNS for a Fortigate Web Proxy

How can I avoid needing a split brain DNS setup with the setup outlined below? Background I have what "should" be a pretty basic setup using a Fortigate 200D. 'Third leg' setup using a DMZ ...
1
vote
4answers
11k views

Get external public ip from command line in fortinet

Is there any way to know the public ip address of a fortinet? There are many services such as icanhazip.com that tell you the current ip. In linux, I would just run: curl http://icanhazip.com How ...
0
votes
0answers
251 views

FortiBalancer and IE TCP issues

We are using a Fortibalancer for our web servers (Win2012 with IIS) and we have run into a strange issue. IE users will experience timeouts (~77s) in getting a response from our servers. Packet traces ...
0
votes
0answers
448 views

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a ...
1
vote
1answer
5k views

How to disable SSL-VPN on FortiOS 5.0

Hearbleed issue. Must disable SSL-VPN. I wasnt able to find it in the GUI. Might there happen to be a CLI command?
0
votes
1answer
5k views

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the ...
0
votes
0answers
2k views

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following http://docs-legacy.fortinet.com/cb/html/index.html#page/...
0
votes
1answer
609 views

ScreenOS Failover tunnel

I have a route-based vpn from my site (Netscreen204) to a customer site (Fortinet) . They want a second, backup tunnel in case of failure, and will be using the Fortune there too. The only thing I ...
0
votes
0answers
713 views

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first ...
0
votes
2answers
4k views

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the ...
0
votes
1answer
791 views

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on ...
4
votes
1answer
5k views

Fortigate VPN Routing issue

I have 200B Fortigate unit with 2 internet WAN connections. I also have a remote site which I'm connected to via IPSEC VPN through WAN1. This site has only one GW IP address. I'd also like to setup a ...
0
votes
1answer
4k views

Open port 8009/tcp on Fortigate necessary?

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if ...
0
votes
1answer
12k views

Fortinet multiple WAN IP to several ports

I have a 5 public IP address range. (ie: 1.1.1.1 to 1.1.1.5) I would like to assign the first to port 1 transparently in a way that a VPN router (RV082) could connect via it and respond transparently....
0
votes
4answers
56k views

Fortigate bandwidth monitoring

I have a Fortigate 200B with Forti OS 5.0. How can I watch the total bandwidth being used by my unit both incoming and outgoing? Thanks
0
votes
1answer
2k views

Fortinet FortiWifi 20C Reset

I've tried multiple times to reset the login on our router, 5 seconds on the reset button, 30 seconds on the reset button, power cycle. No matter what I google and do, I can't seem to get this thing ...
4
votes
7answers
104k views

Fortigate VPN client “Unable to logon to the server. Your username or password may not be properly configured for this connection. (-12)”

We're running a Fortigate 100D, and having some trouble with the SSL VPN via FortiClient. I installed FortiClient on an external Windows 7 PC a few days pack and the SSL VPN connected and worked. I ...
2
votes
2answers
10k views

Network Tap (SPAN port) on FortiGate 100D (FortiOS 4.0MR3)

I'm dealing with a FortiGate 100D for the first time, and am scratching my head as there doesn't seem to be an easy way to mirror ports in the switch; which is really a facility that I presumed it ...