I set up HA between 2 FortiGate VMs on vSphere. When I do a packet sniff
on the heartbeat interface of FW1b I am getting ICMP unreachables for
port 730 from FW1a. Both are configured identical. Any idea where to
troubleshoot next? FW1a:bb-fortigate-1...
In the NSE-7 7.2 EFW study guide it says this: Although IPS uses
flow-based techniques to identify threats but you can apply profile in
both flow-based andproxy-based firewall inspection. So does attaching an
profile turn the rule into a Flow based r...
I have a few questions about device settings and provisioning templates.
I will explain the scenario then put questions below. Example:I have a
CLI template which configures interfaces with IP addresses, using a meta
variable: config system interface<!-- -->...
I followed these steps to import a CA certificate and key for
decryption:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-import-the-CA-certificate-for-full-SSL/ta-p/189786
The certificate now shows up in Local CA certificates. Howev...
Hi Debbie, thank you, using what you wrote and also finding this link
below I was able to create dynamic "placeholder" certificate. Thanks!
https://community.fortinet.com/t5/FortiManager/Technical-Note-How-to-manage-Local-certificates-from/ta-p/19460...
