Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com
PCNSE
NSE
StrongSwan
I' ll be lazy and just cite my own post here:
You can prevent forwarding such traffic by creating blackhole routes with a very low priority. They will not be followed if there' s a valid route to the tunnel; and a blackhole route will discard any traffic sent to it. There are posts about blackhole routes on the forum, like this one here: https://forum.fortinet.com/FindPost/87069 I' ve posted the CLI commands for the most common RFC1918 private networks there. Be aware of Bob' s comment on blackhole routes interfering with Policy Based Routes - which might or might not affect your setup.As I said, this just has the most common RFC1918 networks covered. YMMV.
Rackmount your Fortinet --> http://www.rackmount.it/fortirack
User | Count |
---|---|
2047 | |
1170 | |
770 | |
448 | |
339 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.