Hi everyone, PC use ISP2 access Internet.PC how to use ISP2 to access
VIP??Here are my debug output: Normal situation:FW # id=20085
trace_id=60 func=print_pkt_detail line=5622 msg="vd-VDOM1:0 received a
packet(proto=6, Public-IP:24789->ISP1:443) from...
Hi all, I am using two fortigate 500E(HA) with firmware 6.2. when I
setting fortianalyzer. I want to use a specified IP as source-ip, but it
didn't work. FGT(setting) # set source-ip 192.168.1.1 192.168.1.1 is not
valid source ip. node_check_object f...
Hi everyone, We have a Memory Usage problem(89%) here . Our Fortigate
300D which version is 5.4.5. Here are the disa sys top-summary output:
PID RSS ^CPU% MEM% FDS TIME+ NAME * 10368 522M 6.6 6.5 263 43:58.40
ipsmonitor [x5] 10395 18M 5.5 0.2 12 00:0...
Hi everyone, We have a fortigate-200d running V5.4.5 here.And we have
two default-route. We also have some VPNs. Here is what I want to do
:corp vlan5 's traffic go wan2 ,other traffic except VPN go wan1, How to
do that ? Here are my route-policy: I ...
Yes, I know just create a policy from pc-to-server can slove the
problem..but that is not what I want… what I want is pc must go through
ISP2 to access vip
Hi sw2090, PC cannot access server directly, it must go through the ISP,
because they are two separte networks.. I have already created vip, but
I use PC access VIP from ISP2, it fail..but when I use another PC from
Internet , It can access Server th...
FGT_Master(global) # set management-vdom MGMT I don't quite understand.
if set vdom "MGMT" as management-vdom. loopback address will not
synchronize to slave? I have tried to create a loopback address like
192.168.91.30/24,but it fail..It is conflict...
the configuration show as below: FGT_Master(global) # config system
global FGT_Master(global) # set management-vdom MGMTFGT_Master:config
system interface edit "mgmt" set vdom "MGMT" set ip 192.168.91.21
255.255.255.0 set allowaccess ping https ssh h...
No,192.168.1.1 is not on FGT. FGT is a seperate vdom, there are two IP
on it(one for master and one for slave).So we must use the common IP as
fortianalyzer source-ip. and that's where I get confused