So we're replacing our existing 100D's in HA with 600E's.I'm only about
3 months in with a new company managing their networks.It consists of 1
primary location with roughly 200-300 users and about 20 remote
locations with 200-300 total users.The cur...
100D's in HA: The internal network is set for 10.4.1.x/24We also have
other internal networks from 10.1.1.x to 10.8.1.x that can all talk to
our primary 10.4.1.x subnetOur other networks are each on their own VLAN
which is all handled by our core swi...
SOLVED: Was able to add additional VIP's through CLI to the same
internal IP Fails in Gui with ("Conflicts with the External IP of
another VIP") For reference: config firewall vip edit "Second 1.1.1.1
VIP" set extip 1.1.1.1 set extintf "wan interface...
Edit: Looks like it was an issue on FortiCloud, because it started
working again yesterday. We have some AP's that are tied to a single
user's FortiCloud account.I'm moving them to a shared login account.I've
removed them from the old account and hav...
Anyone know of an easy way to move AP's from 1 account to another
without having to take the AP's out of use?We have over a dozen AP's at
different sites that were set up under an individuals FortiCloud account
and we want to move them to the "shared...
boneyard wrote:you create a virtual IP, which a public IP address on the
external side and the IP address of the Windows 10 on the internal side.
use that virtual IP in a firewall policy from external to internal. you
probably only want to allow RDP ...
Do you have Static routes set with the same Distance for each WAN
connection?Make sure your primary WAN connection has the lowest priority
EG, 0 and then your other wan connections are 1 or higher.You'll then
want to enable advanced routing under the...
Currently, the firewall handles all the routing for the remote offices,
and we're not doing any interoffice security/filtering currently. It
would probably kill the 100D's. I do like the ability to add additional
security/visibility for the remote si...
I thought I've read or heard that it was better to do your routing on
the core switch instead of the firewall?I'm thinking this was due to
resource limits on the firewall.I don't think this will be an issue once
we replace our 100D's with the 600E's ...