FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to disable the Link-Local Multicast Name Resolution in FortiGate Interface.
Scope
FortiGate.
Solution
Link-Local Multicast Name Resolution istheprotocol that allows IPv4 and IPv6 hosts on a local network to resolve each other's names without usinga DNS server.
LLMNR runsonthelocal network segment and uses multicast packetsfornameresolutionforneighborhosts. It isprimarilyutilizedwhere,bytradition,DNS resolution iseitherunavailable oritwouldbeimpracticableto have it done. For example, asmall localnetworkoroneunreachable byDNS servers.
Disable the Link-Local Multicast Name Resolution in the FortiGate CLI:
config system interface
edit <interface name> set netbios-forward disable
end
Note:
The netbios-forward is also used to forward the NetBIOS requests to the WINS server.
