Re: Question about forwarding FortiSASE syslog

Vbharath_FTNT · 10-09-2023

Description This article describes how to disable hardware acceleration for Proxy SSL inspection. Scope Any supported version of FortiGate. Solution When proxy inspection is used on a FortiGate unit, SSL jobs can be offloaded to hardware - CP8/9 or S...

Vbharath_FTNT · 10-03-2023

Description This article describes how to automatically save WAD debug when a WAD process crashes. Scope FortiGate, ForitProxy. Solution In FortiOS and FortiProxy, the WAD process is responsible for Webproxy and Proxy-based inspection features. The W...

Vbharath_FTNT · 07-17-2019

DescriptionThis document describes how to upgrade FortiAnalyzer firmware. v\:* {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} Normal 0 false false false false E...

Vbharath_FTNT · 07-10-2019

Description This document explains how to mitigate the improper check of the certificate revocation vulnerability in FortiOS. FortiGate configuration steps outlined in this article can also be completed using FortiManager, if the FortiGates are manag...

Vbharath_FTNT · 02-01-2019

Description This article explains how to add X-fowarded-for and X-forwarded-proto headers to HTTP(S) traffic towards a webserver protected by the FortiGate unit (Virtual IP). Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ tabl...

Vbharath_FTNT · 12-19-2023

Adrian is correct, I did verify this internally and currently Syslog forwarding to an external server is only supported to a public IP which means the syslog should be reachable via a Virtual IP behind a Fortigate or another Firewall. If you choose t...

Vbharath_FTNT · 12-19-2023

You can try the following:VPN tunnel between your Hub and the remote site where the syslog is located and send the logs from FortiSASE (SPA tunnel) >> Hub (VPN Tunnel) >> Remote Syslog server.

Vbharath_FTNT · 11-09-2016

Hi,Can you give more details of your setup ?FGT Model, number connections/sessions per sec etc.. ?If you can just copy/paste firewall policy cli config here, that would be helpful to understand as well.RegardsViswa

Vbharath_FTNT · 05-06-2015

Hi, User authentication timeout is idle timeout by default which means the user/host should not generate any traffic for xxx number of minutes minutes configured under user authentication timeout. In case if any application is generating traffic from...

Re: User Identity Policy and NTLMv2 · 05-06-2015

Hi, NTLM V2 is supported. You can do a packet capture on client PC and use wireshark filter "ntlmssp.ntlmv2_response" to confirm this..Viswa

User Statistics

User Activity

Technical Tip: How to Disable hardware accleration for Proxy SSL inspection

Technical Tip: How to use WAD crash debug collection feature

Upgrading FortiAnalyzer Firmware

Technical Tip: Solutions for improper check of the certificate revocation vulnerability in FortiOS

Technical Tip: How to add X-forwarded headers to the traffic towards protected Webserver behind FortiGate