Features that will not work in Transparent Mode

Forum|Forum|11 years ago
May 22, 2015
2 replies
3750 views

Hi everyone,

I'm planning to setup a FG-80C in transparent mode behind two routers on my network.

I just want to know what are the features of fortigate that will not work in transparent mode setup compared to NAT mode?

And what should be the best practice in transparent mode? My purpose is just blocking prohibited sites on my network and control the bandwidth usage on particular users. Is single sign on and traffic shapping works in transparent mode? Can I also access the firewall outside my network while in transparent mode?

Any help, tips, suggestions, reactions will be much appreciated. Thank you.

Regards,

Jam

Best answer by emnoc

Here's some differences that are NOT in transparent mode

no sslvpn

no dhcp services

no vip or loadbalancing supportno routing to include multicast or unicast or pbr

no dns server

Now to answer the others, yes you can managed the unit if you apply an address on a management interface?

BCPs, will you have to deploy all reasonable firewall security practices, ideally in your case. I would deploy the unit with allow and then tighten things down after you step thru and understand the unit. This will apply the least interruptions.

TS, I never heard of anyone using TS in L2-mode, but yes you could rate limit users access.

ALL UTMs features that I'm aware of, should be available in L2-mode.

emnocAnswer

New Member

Here's some differences that are NOT in transparent mode

no sslvpn

no dhcp services

no vip or loadbalancing supportno routing to include multicast or unicast or pbr

no dns server

Now to answer the others, yes you can managed the unit if you apply an address on a management interface?

BCPs, will you have to deploy all reasonable firewall security practices, ideally in your case. I would deploy the unit with allow and then tighten things down after you step thru and understand the unit. This will apply the least interruptions.

TS, I never heard of anyone using TS in L2-mode, but yes you could rate limit users access.

ALL UTMs features that I'm aware of, should be available in L2-mode.

YtseJamAuthor

New Member

Hi Sir Ken,

Good day, thank you for your information regarding transparent mode. I'm not that familiar in this mode of setup because I usually use NAT mode. Although I read already some cookbooks regarding transparent mode but most are just basic guide.

Noted this!

Regards,

Jam

Sign up

Login with SSO

Login to the community

Login with SSO