Greetings. What's the recommended configuration for blocking access to
all websites except for those explicitly allowed under v7.0.14? Would
the recommendation be the same for v7.4.7? Thank you -Steve
Greetings, I have a FortiGate at the main office, subnet
192.168.1.0There are several hardware-based IPSec VPNs for remote
locations:Remote office 2, subnet 192.168.2.0Remote office 3, subnet
192.168.3.0Remote office 4, subnet 192.168.4.0and so on.Th...
FortiClient 5.2.6.0664 and newerHello, does anyone know how FortiClient
might be interfering with Deltek Ajera? The trouble comes when following
a link (Time & Expense) that produces a pop-up window just prior to
opening a new browser window. Uninsta...
Fortigate 90D, v5.2.11,build754FSSO 5.0.256 on DC running Win Server
2012 R2 I see from the log that it's having problems accessing the
registry, but I've already confirmed that the service account has full
privileges (and it's an admin account). I c...
Hello I just replaced my old FortiGate 100 with a new FortiGate 90D and
there are still a few things that behave differently than before. When
I’m connected to my FortiAP with a phone I’m unable to retrieve mail
from my internal mail server, or any o...
The wireless problem was resolved by switching to bridge from tunnel
mode so the wifi users are on the internal subnet. I thought it would
work the other way with my wireless -> internal and wireless -> external
policies.
Thanks Ede, Dave I'm using the VIP as the destination address as this
article advises. I wanted to avoid using external IPs from the LAN, but
even with a local record for mail that resolves to the server's internal
IP, things on the LAN seem to insis...
Answer: Yes, internal -> internal policies are now required for internal
access to internal servers by external IP. Thanks again. Thanks, Ede.
I've had VIPs set up on the new FortiGate from the beginning. They're
configured identically to the old For...
Thanks, Ede & Dave.None of the servers are on the DMZ. All are on one
internal interface. The only difference I found between the old and new
FortiGate was the "Enable DNS forwarding from" option in the old one. My
LAN’s clients can find the server b...
