Howdie all, got an e-mail about this threat (
https://www.fortiguard.com/psirt/FG-IR-18-384 ). Upon rereading it now I
noticed the line that the only workaround is to unset the source
interface completely. What I did back when it got released is set ...
Hi all, fortigate 60E running 5.4. tried setting up our fortigate as our
DNS server. But ran into the problem that txt records do not seem to be
supported either via gui or cli. How does one go about adding spf
entries without txt type dns-entries? k...
Hi everybody, our Site2Site IPSec VPN Tunnel between two FTG-60E on
5.4.4 is slow and I have run out of stuff to try. Both Sites are
connected via Gbps Fiber Internet. Iperf3 to a public Iperf Server gave
600+ Mbps results on both ends. So we know ou...
trying to connect forticlient on my iPad to our new Fortigate 60E but
keep getting the same error on the iPad: Connection Error. Got bad
packet from remote Forticlient on iPad is 5.4.3.139FortiOS on FG60E is
5.4.3,build5873 The VPN Event logs are alw...
Hi everybody, I have a quick question I wasn't able to find the answer
to. We just bought two fortigate 60Es. One for our HQ and one for our
branch office. As far as I understand each fortigate comes with 10
forticlient licenses. Now my question is a...
boneyard wrote: contact Fortinet support, the chance they will respond
on this here is very small. will most certainly :) Always go via forums
first in case somebody else already asked. And to leave a searchable
trace for future.
ede_pfau wrote:As the exploit hinges on stuffing the URL to the web
portal with 'special' arguments, you just cannot have been exposed if
there was no public facing interface on which the sslvpn daemon was
listening. For any exploit, you need to have...
ede_pfau wrote:IMHO unsetting the listened-on interface is the most
simple way, and the recommended one as well. Apart from that all current
FortiOS versions are patched against this exploit. Undoubtetly. The
going forward is very clear. I already un...
Paul S wrote:I have a 1 gbps link too with slow IPSEC VPN. FG200D 5.2.10
to FG60D 5.2.11.500 to 700mbps in one direction and 124 mbps in the
other. I will replace my FG60D with a FG60E for testing purposes if I
don't find a solution soon. 124mbps is ...