Skip to main content
akumar02
Staff & Editor
Staff & Editor
January 29, 2025

Technical Tip: How to disable the Link-Local Multicast Name Resolution (LLMNR) in FortiGate.

  • January 29, 2025
  • 0 replies
  • 1428 views
Description This article describes how to disable the Link-Local Multicast Name Resolution in FortiGate Interface. 
Scope FortiGate.
Solution

Link-Local Multicast Name Resolution is the protocol that allows IPv4 and IPv6 hosts on a local network to resolve each other's names without using a DNS server.


LLMNR 
runs on the local network segment and uses multicast packets for name resolution for neighbor hosts.
It is
 primarily utilized where, by tradition, DNS resolution is either unavailable or it would be impracticable to have it done. For example, a small local network or one unreachable by DNS servers.

Disable the Link-Local Multicast Name Resolution in the FortiGate CLI:

config system interface

    edit <interface name>
        set netbios-forward disable

     end

 

Note:

The netbios-forward is also used to forward the NetBIOS requests to the WINS server.


Related article:

Technical Note: Forwarding NetBIOS requests

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!