Re: Cannot delete interface

Toshi_Esumi · 11-04-2025

We just got FortiCloud Premium license to manage our customer's FTNT cloud services like EMS Cloud under our master account/org. But I'm struggling to set those customers under "Organizations". Originally I thought we would have to create an Sub-OU p...

Toshi_Esumi · 10-02-2025

Does anybody know the reason why it skipped 7.x.x and jumped from 6.6.x to 8.0.0?And, most importantly what is the major change with this new version in the software structure compared to any 6.6.xs? What's new section in the release notes doesn't in...

Toshi_Esumi · 01-14-2025

I saw some conversation about stopping auto-upgrade on FGTs before after 7.2.8. And, we're doing it manually for those FGTs that are NOT managed by FMG. Then when we tried the same for those managed by FMG, the change was rejected because it's manage...

Toshi_Esumi · 10-23-2024

This version of FMG was released last week and now CVE-2024-47575 is released as well.https://www.fortiguard.com/psirt/FG-IR-24-423However, the release notes doesn't have anything in the resolved issue section. Does this actually have the vulnerabili...

Toshi_Esumi · 07-24-2024

A basic question: Would Websocket app (TCP 443) traffic be filtered by a policy with a Web Filter profile? Or do we need to match it with Application Control in a separate policy before or after the web filter policy?Thanks, Toshi

Toshi_Esumi · 12-05-2025

Then ask Crowdstrike.Toshi

Toshi_Esumi · 12-05-2025

You can try CGNAT range 100.64.0.0/10 for client IPs, which would never conflict those users LAN or the office network.Toshi

Toshi_Esumi · 12-03-2025

Then "wan1" should work with diag sys waninfo ipify.Are you sure DNS works from the FGT? You can ping api.ipify.org, right?fg40f-utm (root) # exe ping api.ipify.orgPING api.ipify.org (104.26.13.205): 56 data bytes64 bytes from 104.26.13.205: icmp_seq...

Toshi_Esumi · 12-02-2025

I would assume the same but it's up to the ISP. You need to ask them what kind of setting on user side those two physical circuits are designed for. One of them could be just a back up. No idea until talk to the ISP.Toshi

Toshi_Esumi · 12-02-2025

My assumption has been the upgrade process converts the RAM loaded config/config file to the new firmware version's, not from the config file from the flash memory/partition. So as long as you're running the intermediate version, it can be upgraded t...

User Statistics

User Activity

FortiCloud Premium - Organizations for MSP/MSSP

What's the major changes with FortiAuthenticator 8.0.0

Stop auto-firmware-upgrade via FMG

FMG 7.2.8

Websocket app traffic with Web Filter

Re: Fortigate/Meraki Syslogs to Crowdstrike

Re: Assigning static IP addresses to SSL VPN users in case of SAML authentication

Re: fortigate virtual ip cant access from outside

Re: Link Aggregation for WAN?

Re: On a fortigate 100F how can I update the secondary partition to match the version on the primary

Re: Cannot delete interface

Re: Fortigate OSPF routes

Re: Redistribute iBGP routes to OSPF in FortiGate

Re: Layer3 Fortiswitch

Re: FortiGate stripping BGP TCP option 19

Re: BGP or OSPF over ipsec tunnels?

Re: configuring tacacs in multi-vdom firewall

Re: Single FortiGuard license for FortiGate A-P HA...

Re: FortiGate 101F Upgrade – From FortiOS 7.0.8 to...

Re: FortiGate 100F Aggregation - Dell S4112F (VLT)

Super User

User Statistics

User Activity

You are leaving our website