Hi,We're soon to be setting up a new office in a different country, we
purchased a pair of 600E devices for that location.In my lab I have a
pair of 60E devices, is it possible to create a partial setup (policy,
routes etc) on the 60E cluster and the...
Hi,When you have an LACP aggregated link and/or VLAN interfaces in a
fortigate at what "level" are you supposed to set the MTU? On our
different generations of switches I have seen different behavior and I
don't know which applies to Fortigate. I hav...
Hi everyone, We have our forti setup as DHCP server for our network, it
has a search domain defined in the system DNS settings and the DHCP
settings for vlans are set to use system default settings, however the
search domain is not being passed to cl...
Hey everyone,We're considering getting a second 60E (we currently have a
60E that was replaced with a 100F) or two 40F for our lab environment so
we can play around with things before rolling them out to production, so
my question is do the smaller m...
Hi everyone, At the moment I'm trying to get RSSO working, we have MS
NPS so no passing groups to the firewall :\ but based on running auth
list the fortinet does "know" who the user is connected to an IP
address. firewall-01 # diagnose firewall auth...
Hey thanks for the reply! The point of the question is that none of
these documents address what the priority/order of defining custom MTUs
should be. So should I be defining on the port + lag + vlan? port +
vlan? lag + vlan? vlan only?It is not clea...
As long as you take care of all routing properly NAT is not mandatory,
ie. the cisco device must know that the route to 192.168.1.0/24 is
through the forti device.
We'll see :) I'll be opening a bug report about this and a few other
things I find weird today so that I can track progress on them. (RSSO
users being totally unusable in policy unless RSSO is also sending
groups, I can't for the life of me wrap my h...
I agree with you that I don't *need* the suffix for things to function.
That being said the reason I say it is an integral part of it is that
these settings are almost always configured at the same time/location
(whether on Linux, Windows or macOS) t...
