Hello everyone, I tried to exempt an DDNS FQDN, but it still gets
blocked by the FortiGate.SSL-Log:SSL connection is blocked,
certificate-status: expired untrusted I tried with an Address FQDN
object and also via this method
https://community.fortine...
Hello everyone, I have read the documentation and multiple community
posts, but I'm still confused if a FortiGate can act as an IPAM server
alone? The documentation says the FortiGate can act as a standalone IPAM
server:https://docs.fortinet.com/docu...
Hi everyone, I'm currently trying to set up a new FG-120G, and I'm
currently stuck with enabling the proxy mode inspection. I tried
following these two instructions for activating proxy mode inspection:-
https://community.fortinet.com/t5/FortiGate/Te...
Hi, just wanted to point out an spelling Error in the second image of
the guide from this
link:https://docs.fortinet.com/document/fortiextender/7.6.0/admin-guide-fgt-managed/201700
The image shows a FortiGate with the description ForitGate. This has
...
Hello everyone,I have noticed that there is a redundant entry in the
Administration Guide
(https://docs.fortinet.com/document/fortigate/7.4.7/administration-guide/443323/dialup-ipsec-vpn-with-certificate-authentication).
It appears that the subject f...
Hello, why does it work, if we add the current IPv4-Address of the DDNS
FQDN to the exempts? Why does it not work for FQDNs?The FortiGate can
resolve the IP of the FQDN, but the exempt does not work with only the
FQDN as an exempt. It only works when...
Hi,I have the same problem but I can see on console port of the FEX that
it has gotten an IPsec configuration from the FortiGate. When I look on
the FortiGate, I see that the IPsec configuration for the FEX is
missing. As the documtent
https://docs.f...
Hi AEK,I wanted an authentication method using YubiKey without having to
purchase an appliance for just 5–10 users. At first, TOTPRadius seemed
like a great option, but it no longer does.On the bright side, I finally
figured out how to use certificat...
IKEv2 does not allow for PAP authentication by design...I wish I had
done my research before this post, but as the above says, IKEv2 does not
allow for PAP authentication. Since TOTPRadius uses PAP as a
Proxy-RADIUS to simply cut the password part an...
