We will be replacing two FGT 200B's running HA active-active with
multiple VDOMs with two 500D's. Normally we would load the config onto
one of the new units (after making the appropriate port and hardware id
changes of course) and mostly follow the ...
Is port triggering (or does fortinet call it something different)
supported in either 4.0 or 5.0 FortiOs? I can' t seem to locate anything
one way or another on this.
You didn't say whether you were reasonably current on your FortiManager
firmware. Although there is still admin user configuration for the FMG
device, I believe under the covers it now uses a different method
(Fortimanager_Access/fgfm_tunnel) for per...
My opinion is to keep at least one local admin account in case you need
a way to login locally when there is no connectivity to FortiManager
(for whatever reason).
We use MFA with FAC on our data center firewalls for both firewall admin
and SSL VPN. We accomplished this by creating multiple groups on the FAC
and using the Fortinet-group-name RADIUS attribute within the group
definition to pass the appropriate g...