We have a Fortigate 100E HA.We are planning switch replacements on the
lan side, about 8 of them across 3 floors/4 IDF's. Planning to use
FortiSwitch 148F-FPOE with the FortiLink's Plan is to have 2 local
FortiSwitches to the Fortigate HA and 2 other...
We deploy full public SSL Certificate's on our Fortigate's. To save $ we
are looking at the Let's Encrypt free certificate. There are a few
questions I have about this.1. Does it auto renew, if so what interval?
Since LE certs are valid 90 days and s...
We are having 2 issues.1st - Policy-based IPsec VPN on SD-wan interface
with 2x ISP's - we cannot control the traffic routing across the other
outbound WAN interfaces that VPN tunnel is build on. We have to use the
policy based VPN tunnels since the ...
We are having numerous Clients that go to 7.2.2. with existing Site 2
Site VPN tunnels on FGT's to FGT's with working configs on 7.2.0. and
7.2.1. That there is a Route Added for 0.0.0.0 with the VPN interface to
the routing table with the same metri...
I have just been told by support that the newer models of Fortigate
80F-PoE and 81F-PoE etc. are NOT going to get the latest firmware's till
January. We will be stuck on 6.2.6 till then. For a security company
this is embarrassing.
I have also been looking for a solution on this. I am thinking of
creating static trunks 802.3ad LACP from Fortigate of 4x1Gb connections,
to a single FortiSwitch. I tried to created the LACP trunk and profile
the port on FSW. The LACP link comes up ...
I think this answers my question.
https://docs.fortinet.com/document/fortiswitch/7.2.6/fortilink-guide/801187/ha-mode-fortigate-units-using-hardware-switch-interfaces-and-stpand
https://docs.fortinet.com/document/fortiswitch/7.2.6/fortilink-guide/801...
I know we can do the LACP trunk on the FS1xx but question is if it can
be bound a single FortiLink interface to the FGT. and if so how is it
configured.
Thanks for the response.I knew the FS1xx series had no MCLAG. thus the
challenge. in 7.2.x there is an option to use 8023ad LAG's into the
Fortigate Fortilink Interface. We could create a 4Gb trunk to each
Fortigate Fortilink interface. How is the LA...
it seem you are thinking I am having an internal web server with ACME on
it. The new FGT 6.4.x & 7.x have ACME on the Fortigate itself.1. Your
answer - I know it renews from Let's Encrypt. - but at what interval?
The AMCE for IIS for Let's encrpt you...