Re: Fortigate as DNS server for FortiNAC

magliano · 02-01-2026

Description This article describes how to restrict GUI login access by configuring trusted hosts. Scope FortiSIEM. Solution GUI login access can be restricted by defining trusted host entries. After trusted hosts are configured: GUI logins are only a...

magliano · 01-27-2026

Description This article describes how to extract the CSRF token from a standalone FortiSwitch in order to perform REST API calls. Scope FortiSwitch (Standalone mode). Solution To retrieve the CSRF token from a standalone FortiSwitch, follow the step...

magliano · 01-27-2026

Description This article describes how to improve FortiLink connectivity by adjusting CAPUTP timers available starting in FortiOS v7.4.0. Scope FortiOS v7.4 or above. Solution To improve FortiLink stability and reduce failover time, adjust the CAPUTP...

magliano · 01-14-2026

Description This article describes how to configure a link-monitor in a multi-VRF environment. Scope FortiGate. Solution To configure a link-monitor using static routes in a multi-VRF environment with route leaking, the FortiGate must be configured t...

magliano · 07-11-2025

Description This article describes how to sign a CSR with FortiAuthenticator without losing the SAN field. Scope FortiAuthenticator. Solution To sign a CSR with SAN information intact, follow these steps: Go to Certificate Management -> End Entities ...

magliano · 02-18-2026

Hi @martec , If you have the source and destination IP addresses, you can run a sniffer and a debug flow to verify where the packets are being dropped and/or whether the traffic is being allowed by a policy or hitting the implicit deny rule. https://...

magliano · 02-17-2026

Hi @njira , Yes, you can configure the ports to operate as FortiLink interfaces. This link may help you with the procedure. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Understanding-FortiLink-Trunks-and-the-Parameters/ta-p/189808 Best r...

magliano · 02-11-2026

Hi @ByteHaven, If you prefer to do so for a specific objective, you may proceed. However, ideally, FortiNAC itself should be configured as the DNS server. May I ask the reason why you would like to use the FortiGate instead of FortiNAC as the DNS ser...

magliano · 02-11-2026

Hi @B_B , You can block the traffic between VLANs as follows. https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-intra-VLAN-traffic-at-the-FortiSwitch/ta-p/405085 If you need to allow specific traffic within the same VLAN, you wou...

magliano · 02-11-2026

Hi @andrejrepka20 , When you mention that it is reflected in the original post, are you still experiencing the same behavior described in your first message? Also, could you please confirm which firmware versions you are currently running? Best regar...

User Statistics

User Activity

Technical Tip: Restrict GUI access using trusted hosts

Technical Tip: How to extract the CSRF token from a standalone FortiSwitch

Technical Tip: Improving FortiLink stability using CAPUTP timers

Technical Tip: Configuring link-monitor with route leaking in multi-VRF deployments

Technical Tip: Signing a CSR with SAN Support Using FortiAuthenticator

Re: Rustdesk connection allowed but no outgoing pakets

Re: Fortilink ports