Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Israt24Fortinet
New Contributor

static route

Hello! In a normal connection (like internet - router - firewall - LAN device) the destination is the default route 0.0.0.0/0.0.0.0.

1) what does it mean by named address?

2) In which case we do not use the default route? 

3) for what purpose we select internet service option?

4) for IPSec VPN, is it mandatory to use blackhole as the interface?

1 Solution
ozkanaltas
Valued Contributor II

Hello @Israt24Fortinet ,

 

1- You can use an address object instead of the IP address on the route configuration.

2- If you know all unknown destination addresses on the internet. You don't need to use default route.

You can find, more information about the routing concept.

 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/139692/routing-concepts

 

3- You can find more information about internet service in this link. 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/849970/internet-services

4-No need to configure the blackhole interface.

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW

View solution in original post

If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
1 REPLY 1
ozkanaltas
Valued Contributor II

Hello @Israt24Fortinet ,

 

1- You can use an address object instead of the IP address on the route configuration.

2- If you know all unknown destination addresses on the internet. You don't need to use default route.

You can find, more information about the routing concept.

 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/139692/routing-concepts

 

3- You can find more information about internet service in this link. 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/849970/internet-services

4-No need to configure the blackhole interface.

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors