|
FortiSASE contains multiple POPs in different regions. Because of the geo-location limitation, it is challenging to identify all the POP ingress public IP addresses.
For example, pinging from Singapore:
C:\Users\user>ping turbo-******.edge.prod.fortisase.com
Pinging sslgateway-fos001-region10.prod.fortisase.com [154.52.16.7*] with 32 bytes of data:
Reply from 154.52.16.7*: bytes=32 time=147ms TTL=52
While pinging from Sydney:
C:\Users\user>ping turbo-******.edge.prod.fortisase.com
Pinging sslgateway-fos001-region15.prod.fortisase.com [154.52.22.9*] with 32 bytes of data:
Reply from 154.52.22.9*: bytes=32 time=3ms TTL=52
There is a useful tool, 'Golbalping', that can help to check all the POP IP addresses in one PC quickly
https://github.com/jsdelivr/globalping-cli?tab=readme-ov-file#installation
After installing the Golbalping, the specific source that can be selected for the Globalping:
C:\Users\user>globalping ping turbo-******.edge.prod.fortisase.com from sydney
[1;38;5;43m> Sydney, AU, OC, DigitalOcean, LLC (AS14061)[0m
PING sslgateway-fos001-region15.prod.fortisase.com (154.52.22.9*) 56(84) bytes of data.
64 bytes from 154.52.22.91 (154.52.22.9*): icmp_seq=1 ttl=55 time=1.13 ms
64 bytes from 154.52.22.91 (154.52.22.9*): icmp_seq=2 ttl=55 time=0.579 ms
64 bytes from 154.52.22.91 (154.52.22.9*): icmp_seq=3 ttl=55 time=4.39 ms
--- sslgateway-fos001-region15.prod.fortisase.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1124ms
C:\Users\tccom>globalping ping turbo-******.edge.prod.fortisase.com from singapore
[1;38;5;43m> Singapore, SG, AS, Dromatics Systems Pte Ltd (AS134677)
PING sslgateway-fos001-region10.prod.fortisase.com (154.52.16.7*) 56(84) bytes of data.
64 bytes from 154.52.16.77 (154.52.16.7*): icmp_seq=1 ttl=58 time=3.81 ms
64 bytes from 154.52.16.77 (154.52.16.7*): icmp_seq=2 ttl=58 time=2.49 ms
The Globalping also supports the below methods:
dns Resolve DNS records, similar to the dig command
HTTP Perform a HEAD or GET request to a host
mtr Run a MTR test, which combines traceroute and ping
ping Perform a ping test
traceroute Run a traceroute test
There is an alternative way that Globalping has: https://globalping.io/ supports over 400 cities that can be the source.
|
