Running 3.5.4 on 448D on Fortilink behind FGTs. Seeing high CPU on a
DHCP process...[cid:image001.png@01D2CEE9.B0526F60]...anyone seeing
this? Clue me in on what this process is doing and why? Can we kill it
permanently...?Tony Taylor - Technical Nin...
You can also do it by hand pretty easily. The interfaces are the
critical piece as FGT models name them differently across the line. You
can look at the default config on the destination FGT and see how they
are named. In some cases they are the same...
FGT 500D: 5.2.2FAC VM: 3.3.1 FSSO on FGT bound to FAC. FAC set to poll
AD. LDAP configured. Groups bound on FGT. Things were generally working
OK. Created GPO to enforce Remote Registry for validation because some
domain computers wree "not verified"...
….assuming as in an MSSP model. There may be something that can be done
on the radius side…such as with FortiAuth and the API. But I do not
think you can do this in the FortiOS directly. Maybe someone else can
fill us in./tFrom: Peter Cook via Firewa...
I believe you “could” break out rules with user groups and user
concurrency limits that would limit users to 20 per group/rule, but this
would be an admin nightmare. Not sure there is a way to limit this
globally…as in 20 total at any given time.What...
DHCP Relay....still chasing.From: Tony Taylor via Switching:
[mailto:switching@lists.fusecommunity.fortinet.com]Sent: Wednesday, May
17, 2017 8:46 AMTo: switching@lists.fusecommunity.fortinet.comSubject:
[Switching:] - FS-448D-FPOE - HIGH CPURunning ...
Different subnet required.Tony TaylorFoundation Republic(Sent from
mobile device)________________________________From: Mahmoud Sabry via
firewall.public Sent: Sunday, March 5, 2017 8:51:57 AMTo:
firewall.public@fuse-lists.fortinet.comSubject: [Extern...