Fortigate & Untangle

[ZiPPy]

Has anybody integrated Untangle with their Fortigate firewall? I' m curious of your configuration, as I' m unable to get mine to pass traffic. I' ve setup the Untangle box between the firewall and the core switch. Thoughts?

[ZiPPy]

Nobody has done this? I guess it' s kind of going against the Fortinet product, as it can already handle most of what Untangle does. But from an IT budget standpoint, it' s really hard to get approval for the licensing of Fortinet. The IT budgets are still getting cut in the industry.

[GregH]

I have this currently running on my home system with a 60C and everything is running correctly and there is no system degradation. Go to the Untangle site and then look up the " configuration options" and use the bridge mode. I have set up the 60C with each individual port have their own IP range. I only pass the home stuff thru the Untangle box and use the other ports for my other devices that need the internet but probably would not need to use the Untangle. I found the secret is to label the internet ports on the Untangle box and then select the correct one when you do the setup but if you are only using two NIC cards it should just be a matter of swapping out the cables. Get the MAC addresses of the NIC cards and you should be ok for the Untangle setup.

[ZiPPy]

I don' t believe the problem I' m having is with the setup of UT, but more so the firewall. Let me explain... I have UT setup between my Fortinet and core switch. I connected UT to the Fortinet on one of the 4 open ports. The ext. and int. are obviously in use. So what IP did you configure the port on your Fortinet that UT is connected to? I get an error saying ' IP address is in same subnet as the others.'

[ZiPPy]

What did you configure your interface on the Fortinet? Actually let me rephrase that, as the UT box was dropped inside the network incorrectly. I' ll connect the internal interface of the Fortinet to the external interface of the UT box. Then the internal interface of the UT box back to the core switch.

[FortiRack_Eric]

Seems to me that Untangle is a bit a of crappy firewall, so if you have a Fortigate dump the Untangle.

[ZiPPy]

In comparison with the Fortigate, I would have to agree. But I' m dropping in the Untangle merely for the web filtering. As I mentioned, the renewal license is very expensive and the board has cut my funding for IT. They don' t understand the dynamics and the need of security on the network. They only get it or want to pay when we get hit. *sigh* It' s very frustrating.

[GregH]

Sorry about the delay. I have port 1 of the 60C going to the external NIC card in the UT box and the internal NIC in the untangle box going to the port 1 of my switch where the other comuters are connected in. I do not think that the subnet address of the port is material as the UT box is in a transparent mode when connected this way.