We just got FortiCloud Premium license to manage our customer's FTNT
cloud services like EMS Cloud under our master account/org. But I'm
struggling to set those customers under "Organizations". Originally I
thought we would have to create an Sub-OU p...
Does anybody know the reason why it skipped 7.x.x and jumped from 6.6.x
to 8.0.0?And, most importantly what is the major change with this new
version in the software structure compared to any 6.6.xs? What's new
section in the release notes doesn't in...
I saw some conversation about stopping auto-upgrade on FGTs before after
7.2.8. And, we're doing it manually for those FGTs that are NOT managed
by FMG. Then when we tried the same for those managed by FMG, the change
was rejected because it's manage...
This version of FMG was released last week and now CVE-2024-47575 is
released as well.https://www.fortiguard.com/psirt/FG-IR-24-423However,
the release notes doesn't have anything in the resolved issue section.
Does this actually have the vulnerabili...
A basic question: Would Websocket app (TCP 443) traffic be filtered by a
policy with a Web Filter profile? Or do we need to match it with
Application Control in a separate policy before or after the web filter
policy?Thanks, Toshi
A little off topic but speaking of "local-in" traffic, like IPsec VPN,
admin access (GUI and SSH) to the FGT, etc., it's "terminated" at the
FGT. It never "pass through" by coming in one interface and going out
another interface, which is controlled ...
I have the same(?) question @charizard has since there is no good
documentation about the new feature of NP7 about how it's designed and
how it would work.The 7.6.4 hardware acceleration doc below says just
conventional npu0-vlink0/1 for NP7, and no ...
HA config is relatively small portion under "config system ha" likely
less than 20 lines. It's easy to recover even if you didn't include HA
in converter conversion. It would probably skip that part. Just make
sure you have backup config for that par...
I think we got the same or similar error when the server cert the SSLVPN
config was using got broken after the FGT upgrade. But if that's case
not only you but everybody else should have the same problem so your IT
support should have known already.S...
Those are routing options you just need to decide, either make the
switch as L2 one or L3 one. There is no difference security-wise. I
personally prefer a L2 switch option since one less L3 node to worry
about. But it's just a matter of preference.To...