Help
FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

FortiGate

Recent Unanswered Unsolved Solved
avatar
Nour Staff rank Staff
Created on Mar 5, 2025 2:10:45 PM
Technical Tip: NAT Port selection process criteria
Description This article explains how the port selection process is done under different port settings ScopeFortiOS.Solution There are different settings that impact the criteria on which a new NAT port will be selected:...
NAT Port selection SNAT
166
0
1
avatar
bbae Staff rank Staff
Created on Nov 7, 2023 10:36:12 AM
Edited on Dec 21, 2023 6:19:09 AM
Technical Tip: For HA environment with enabled mgmt and ha interface, how Source-NAT works for IPSEC Interface
DescriptionThis article describes how Source-NAT for IPSEC interface on HA environment with enabled mgmt and ha interface works.ScopeFortiGate v6.4, FortiGate v7.0, IPSEC VPN, SNAT.Solution If configuring 'srcintf' on po...
FortiGate 6.4 FortiGate 7.0 IPSEC VPN SNAT
906
0
1
avatar
fwilliams Staff rank Staff
Created on Nov 6, 2023 7:40:20 AM
Edited on Jan 16, 2025 3:54:58 PM
Technical Tip: How to perform address translation in both direction on FortiGate with Central SNAT mode
DescriptionThis article describes how to configure FortiGate to perform DNAT (VIP) and SNAT together on the same packet in cases where it needs to masquerade (hide) both the original source IP and destination IP.ScopeFor...
arp-reply central SNAT SNAT VIP
3998
0
0
avatar
Mrinmoy Staff rank Staff
Created on Jul 14, 2022 11:56:36 PM
Edited on Jul 15, 2022 12:02:30 AM
Technical Tip: Configuring Site-to-site IPSec VPN in Central SNAT mode with overlapping subnets
DescriptionThis article describes configuring Site-to-site IPSec VPN in Central SNAT mode with overlapping subnets.Scope FortiGate 6.0 or above. Solution Let's consider there are 2 sites (head office and branch) where th...
FortiGate IPsec SNAT
8028
0
0
avatar
msolanki Staff rank Staff
Created on Jul 14, 2022 5:18:27 PM
Edited on Sep 6, 2024 10:23:03 AM
Technical Tip: SSL VPN webmode behavior with SNAT IPpool
Description This article describes when using SNAT IP pool in SSL VPN policy then it has different behavior in some FortiGate versions. ScopeFortiGate.Solution Due to recent changes in some versions (v6.4.9, v7.0.1) beha...
FortiGate IP Pools SNAT SSL-VPN
2265
0
0
avatar
Stelios_FTNT Staff rank Staff
Created on Dec 28, 2018 12:11:04 PM
Edited on Nov 12, 2024 7:45:23 AM
Technical Tip: How to disable source NAT to enable a hairpin policy or one-arm firewall
Description   This article describes how to disable source NAT when a policy allows traffic between two subnets on the same interface.   In this scenario, the traffic enters and leaves FortiGate via the same interface. ...
FortiGate 7.0 FortiGate 7.2 FortiGate v5.4 FortiGate v5.6 SNAT VIP
19544
0
3

    Can't find what you are looking for?

    Suggest New Article
    Announcements

    Welcome to your new Fortinet Community!

    You'll find your previous forum posts under "Forums"

    Top Contributors
    Labels
    Top Kudoed Authors
    View all
    Broad. Integrated. Automated.

    The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

    Social Media
    Security Research
    Company
    News & Articles
    Contact Us

    Copyright 2025 Fortinet, Inc. All Rights Reserved.