NGFW mode unavailable to change

matheusbpedro · ‎06-06-2023

I`m trying to get the certificate NSE4, but in the training (CBT Nuggets) have a NGFW option in the last version 7.0.10 I made this change without problems
System > Settings > NGFW Mode
Now, in version 7.0.11 I didnt find this options in the same section, print attached Version 7.0.11Version 7.0.10
Someone can help me?

Yurisk · ‎06-07-2023

You got the wrong VM image - you installed FortiFirewall, but you need FortiGate.

Output of free licensed VM Fortigate, see the name after Version:

FGT-7-2-2 # get sys stat
Version: FortiGate-VM64 v7.2.2,build1255,220930 (GA.F)
Virus-DB: 1.00000(2018-04-09 18:07)
Extended DB: 1.00000(2018-04-09 18:07)
Extreme DB: 1.00000(2018-04-09 18:07)
AV AI/ML Model: 0.00000(2001-01-01 00:00)
IPS-DB: 6.00741(2015-12-01 02:30)
IPS-ETDB: 6.00741(2015-12-01 02:30)
APP-DB: 6.00741(2015-12-01 02:30)
INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)
IPS Malicious URL Database: 1.00001(2015-01-01 01:01)
IoT-Detect: 0.00000(2001-01-01 00:00)
Serial-Number: FGVMEV_ATFDMNL66
License Status: Valid
VM Resources: 1 CPU/1 allowed, 2007 MB RAM/2048 MB allowed

More on difference https://community.fortinet.com/t5/Support-Forum/What-is-FortiFirewall/td-p/222567

Yuri https://yurisk.info/ blog: All things Fortinet, no ads.

View solution in original post

Faiza_Emam_Delhi · ‎06-07-2023

It seems that in version 7.0.11 of Fortinet, the NGFW mode option has been removed from the System Settings section. However, this does not mean that the NGFW mode is unavailable.

To change the NGFW mode in version 7.0.11, you will need to use the CLI (Command Line Interface) instead of the GUI (Graphical User Interface). You can access the CLI by connecting to the Fortinet device via SSH or Telnet.

Once you are connected to the device, you can use the following command to change the NGFW mode:

config system global
set ngfw-mode <mode>
end

Replace <mode> with the desired mode, which can be one of the following:

- proxy
- flow
- proxy-based-flow

After entering the command, be sure to save the changes with the following command:

end
write memory

I hope this helps you in your pursuit of the NSE4 certification....

Thanks & Regards,
Faizal Emam