Why limit to Authentication-based routing,can' t fortinet have Address-based and Device Identity routing on the policy tab itself rahter than putting it on the policy route tab would be very nice to have when your using/have multiple gateways
+1 for PBR within firewall policy
I would like to be able to see more routes state aware PBR to track availbility (DGD) of next hop gw..or even better IP SLA echo and track rtr as in CISCO gears..this should be great for PDR against redundant ipsec tunnels!
Decouple both the server load balancing health checks and the dead gateway detection tests into their own ' section' so that they could be used to control not only gateway detection or server pools but also individual routes, firewall policies, or a number of other functions within FortiOS that could be turned on or off depending on the results of one or more checks. Adding things like latency as a metric for the tests could also enable things like performance based routing.
a) Support for 6rd sit-tunnels with DHCP wan IPv4 addresses
b) DNS autoupdates of DNS database zones (for client DNS updates - IPv6 without names is no fun).
c) serial port on 60D ;)
d) Implementation of a " good" and " bad" CA certificate for UTM SSL filtering (usage: sign with " good" certificate if external page cert is valid, sign with " bad" certificate when external page cert is invalid).
Newer versions of 60D and 90D come with serial port on the front.
See the datasheet for 60D http://www.fortinet.com/sites/default/files/productdatasheets/FortiGate-60D.pdf
That was something I immediately noticed about some of the newer desktop models and I am happy to say it' s back for most (if not all) of those units. For those that do not have serial console, you can use FortiExplorer and a USB cable to get to the boot menu where you can interrupt boot.
In fact, if you have a few of the older revisions of 60D without console port deployed remotely at a location, one possible solution is just to plug the USB into a server or even a dedicated device like a Mac Mini.
Sean Toomey, CISSP FCNSP
Consulting Security Engineer (CSE)
FORTINETâ€” High Performance Network Security