List of most popular articles related to FortiGate Firewall features and settings (Policy, VIP, Protection Profile, Services, Traffic Shaping...)
Description
Technical Tip : Using multiple IP addresses or address groups to filter source or destination in a single firewall policy
Technical Note : Configuring a Firewall Policy which is valid only at certain days or hours by using a schedule
Technical Tip : configuring a Firewall Policy with action = DENY to log unauthorized traffic, also called "Violation Traffic"
Technical Tip : Troubleshoot and verify if traffic is hitting a Firewall Policy
Changing the TCP session TTL (time to live) on a FortiGate - V4.0, per firewall policy
Note about enabling Endpoint NAC in a FortiGate Firewall Policy with authentication redirected to HTTPS
How to configure a Firewall Policy on a Fortigate
Technical Note : Using DENY firewall policies to stop Spam on a FortiGate
Firewall policies using VIP groups
FortiGate log information : firewall policy of 0 (zero) "policyid=0"
Configuring a "Custom Service" in FortiOS
Technical Tip : Changing the administration TCP ports to avoid conflict when using a VIP with same external IP address as the FortiGate
Technical Note : configuring multiple VIP (Virtual IPs) from different external interfaces to the same real server
Technical Note : configuring a VIP (Virtual IP) to map an external IP to another external IP on the same port of the FortiGate
Technical Tip : Using multiple IP addresses or address groups to filter source or destination in a single firewall policy
Technical Note : Static NAT VIP accessible from 2 external interfaces with E-BGP peerings
Technical Note : Configuration example of Policy Based Routing and VIP for SMTP services in Dual Wan scenario
Feature Description - v4.0 Firewall VIP Load Balance
Technical Note : accessing internal resources (servers or services) from the Internet with a VIP - Public IP to Private IP addresses
How to configure a VIP ( Virtual IP ) ?
Technical Note : Configuring FortiGate Firewall Policy to block traffic for one or more IP addresses
VIP on vlan interface of redundant interface does not reply to ARP
Blocking "Your Freedom" using FQDN firewall addresses
Logging traffic violation on VIP
How to route/allow packets between 2 subnets on the same interface of a FortiGate (with one or more Secondary IP Addresses)
Configuring MAC address filtering on a FortiGate
Setting up a VIP address for dialup ipsec VPN between FortiGate and FortiClient
FQDN not working. Entry of Firewall addresses with NO spaces
Technical Note : Traffic shaping and outbandwidth parameter for Guaranteed and Max bandwidth
Traffic shaping in FortiOS v4.0, configuration and troubleshooting
Traffic shaping considerations
Limiting YouTube bandwidth
How do I use Protection Profiles to scan for viruses?
Configuring group-level Protection Profile settings
"Invalid or missing protection profile id" web filtering message
List of most popular articles related to FortiGate Firewall features and settings For an extended search to all articles including archives, please go to the KB home page |
Technical Tip : Using multiple IP addresses or address groups to filter source or destination in a single firewall policy
Technical Note : Configuring a Firewall Policy which is valid only at certain days or hours by using a schedule
Technical Tip : configuring a Firewall Policy with action = DENY to log unauthorized traffic, also called "Violation Traffic"
Technical Tip : Troubleshoot and verify if traffic is hitting a Firewall Policy
Changing the TCP session TTL (time to live) on a FortiGate - V4.0, per firewall policy
Note about enabling Endpoint NAC in a FortiGate Firewall Policy with authentication redirected to HTTPS
How to configure a Firewall Policy on a Fortigate
Technical Note : Using DENY firewall policies to stop Spam on a FortiGate
Firewall policies using VIP groups
FortiGate log information : firewall policy of 0 (zero) "policyid=0"
Configuring a "Custom Service" in FortiOS
Technical Tip : Changing the administration TCP ports to avoid conflict when using a VIP with same external IP address as the FortiGate
Technical Note : configuring multiple VIP (Virtual IPs) from different external interfaces to the same real server
Technical Note : configuring a VIP (Virtual IP) to map an external IP to another external IP on the same port of the FortiGate
Technical Tip : Using multiple IP addresses or address groups to filter source or destination in a single firewall policy
Technical Note : Static NAT VIP accessible from 2 external interfaces with E-BGP peerings
Technical Note : Configuration example of Policy Based Routing and VIP for SMTP services in Dual Wan scenario
Feature Description - v4.0 Firewall VIP Load Balance
Technical Note : accessing internal resources (servers or services) from the Internet with a VIP - Public IP to Private IP addresses
How to configure a VIP ( Virtual IP ) ?
Technical Note : Configuring FortiGate Firewall Policy to block traffic for one or more IP addresses
VIP on vlan interface of redundant interface does not reply to ARP
Blocking "Your Freedom" using FQDN firewall addresses
Logging traffic violation on VIP
How to route/allow packets between 2 subnets on the same interface of a FortiGate (with one or more Secondary IP Addresses)
Configuring MAC address filtering on a FortiGate
Setting up a VIP address for dialup ipsec VPN between FortiGate and FortiClient
FQDN not working. Entry of Firewall addresses with NO spaces
Technical Note : Traffic shaping and outbandwidth parameter for Guaranteed and Max bandwidth
Traffic shaping in FortiOS v4.0, configuration and troubleshooting
Traffic shaping considerations
Limiting YouTube bandwidth
How do I use Protection Profiles to scan for viruses?
Configuring group-level Protection Profile settings
"Invalid or missing protection profile id" web filtering message