Welcome to the Fortinet Community!

Difference Between "FSSO Agent on Windows AD" and "LDAP Servers" Configuration in FortiGate

Hello community,I am currently configuring FSSO in FortiGate to create identity-based firewall policies using Active Directory usernames/groups, and I have a question regarding two different configuration sections that seem related to AD integration.

787

W

5 minutes ago

bmuhammadStaff

Technical Tip: Forcing Sierra modem FortiExtenders to connect to LTE if it cannot register to any network

This article is intended to provide guidance for trying to force a Sierra modem FortiExtender like 201E to use LTE technology , if for some reason it is searching for a carrier network but cannot register to any network ScopeFortiExtenderSolutionWe w

Technical Tip: How to collect status of DHCP snooping on a managed FortiSwitch from FortiGate CLI

1 hour ago

lsaroukhaniStaff

FortiSwitch

DescriptionThis article describes how to collect status of DHCP snooping on a managed FortiSwitch from the FortiGate CLI.ScopeManaged FortiSwitch, FortiGate.SolutionCollect DHCP snooping client and server information with the command 'diagnose switch

TilagenVNew Member

FortiNAC - Isolation interface captive portal

Hi Everyone,I am currently working on a FortiNAC deployment integrated with Cisco switches and FortiGate firewall, and I would appreciate some advice regarding the captive portal/isolation VLAN configuration.Environment: FortiNAC version: 7.6.x Cis

332

athanwagoVisitor

Technical Tip: Secure web proxy through FortiProxy gateway

Fortisandbox integration

Hey everyoneI’m deploying FortiSandbox for the first time and integrating it with FortiGate, F5 Load Balancer, and an internet modem.Before starting, I want to make sure the environment is ready.What are the required network prerequisites and ports t

princesStaff

DescriptionThis article describes the flow and working of a secure proxy through FortiProxy device. With a secure proxy, the HTTP CONNECT message is sent encrypted over the TLS connection.ScopeFortiProxy.SolutionThe following configuration needs to b

skkNew Member

Questions about changing ha cluster parameters

Dear Community, I have three question about changing parameters in a production environment ha cluster. This cluster has two hw fortigate on one location, which work nicely. Now I have to add a third one but in this time this should be an another loc

324

DAvidR7New Member

Lab with Fortianalyzer and Fortigate 7.4

Hello, I'm trying to do a lab with a trial version of fortianalizer (7.4.10) and fortigate (7.4.11) and I can't do the connection. When setting the IP of the analizer on the logging settings on the fortigate I get "no connection".They

2294

naveenkStaff

Technical Tip: Protocol header checking

Description   This article describes how to select the level of checking performed on packet headers.   Scope   FortiGate.Solution   If a packet fails header checking, it is dropped by the FortiGate. The header properties checked

shijugVisitor III

URGENT: FortiGate 401E Daily System Hang – Console Unresponsive

We are experiencing a critical and recurring issue with our FortiGate 401E.The device hangs once or twice daily Issue has been ongoing for ~2 years During the hang: No traffic passes through the firewall GUI and SSH become inaccessible Console is c

willy007Visitor II

Difference Between "FSSO Agent on Windows AD" and "LDAP Servers" Configuration in FortiGate

Hello community,I am currently configuring FSSO in FortiGate to create identity-based firewall policies using Active Directory usernames/groups, and I have a question regarding two different configuration sections that seem related to AD integration.

bmuhammadStaff

Technical Tip: Forcing Sierra modem FortiExtenders to connect to LTE if it cannot register to any network

This article is intended to provide guidance for trying to force a Sierra modem FortiExtender like 201E to use LTE technology , if for some reason it is searching for a carrier network but cannot register to any network ScopeFortiExtenderSolutionWe w

1 hour ago

TilagenVNew Member

FortiNAC - Isolation interface captive portal

Hi Everyone,I am currently working on a FortiNAC deployment integrated with Cisco switches and FortiGate firewall, and I would appreciate some advice regarding the captive portal/isolation VLAN configuration.Environment: FortiNAC version: 7.6.x Cis

332

athanwagoVisitor

Questions about changing ha cluster parameters

Fortisandbox integration

Hey everyoneI’m deploying FortiSandbox for the first time and integrating it with FortiGate, F5 Load Balancer, and an internet modem.Before starting, I want to make sure the environment is ready.What are the required network prerequisites and ports t

skkNew Member

Dear Community, I have three question about changing parameters in a production environment ha cluster. This cluster has two hw fortigate on one location, which work nicely. Now I have to add a third one but in this time this should be an another loc

324

DAvidR7New Member

Lab with Fortianalyzer and Fortigate 7.4

Hello, I'm trying to do a lab with a trial version of fortianalizer (7.4.10) and fortigate (7.4.11) and I can't do the connection. When setting the IP of the analizer on the logging settings on the fortigate I get "no connection".They

shijugVisitor III

URGENT: FortiGate 401E Daily System Hang – Console Unresponsive

We are experiencing a critical and recurring issue with our FortiGate 401E.The device hangs once or twice daily Issue has been ongoing for ~2 years During the hang: No traffic passes through the firewall GUI and SSH become inaccessible Console is c

ra-v83New Member

History of entered ssh commands

Hello :)I have a question about connecting via Putty or PowerShell. How do I clear the history of entered commands that are substituted after pressing the up and down keys? Connecting via SSH to the FG900, I don't know where the history of such comma

steven4Visitor III

AGENTLESS ZTNA Tutorial

Hello there,can anyone suggest any other tutorial for agentless ZTNA rather than fortinet official documentation. I don’t understand it how to implement correctly. any video, documentation, guides, articles would be appreciated.

345New Member

FG-FAZ no connectivity issue

Hello,I need help about our issue with connectivity FG<->FAZ. We are currently troubleshooting connectivity between a FortiGate 200G and a FortiAnalyzer VM.Environment overview:FortiGate 200G running in multi-VDOM modeDedicated management inter

lsaroukhaniStaff

Technical Tip: How to collect status of DHCP snooping on a managed FortiSwitch from FortiGate CLI

DescriptionThis article describes how to collect status of DHCP snooping on a managed FortiSwitch from the FortiGate CLI.ScopeManaged FortiSwitch, FortiGate.SolutionCollect DHCP snooping client and server information with the command 'diagnose switch

princesStaff

Technical Tip: Secure web proxy through FortiProxy gateway

DescriptionThis article describes the flow and working of a secure proxy through FortiProxy device. With a secure proxy, the HTTP CONNECT message is sent encrypted over the TLS connection.ScopeFortiProxy.SolutionThe following configuration needs to b

40

3 hours ago

naveenkStaff

Technical Tip: Protocol header checking

Description   This article describes how to select the level of checking performed on packet headers.   Scope   FortiGate.Solution   If a packet fails header checking, it is dropped by the FortiGate. The header properties checked

58011

Technical Tip: Configuring FortiLink over 3rd party switches with L2 connectivity with the FortiGate

Raul_17Staff

FortiSwitch

Description This article describes a generic procedure to be used when there are 3rd party switches directly connected to the FortiGates acting as Tier-1. It does not require VxLAN, so it could be used for any FortiSwitch model. Scope Tested wi

14303

kamanStaff