Greetings, I have a FortiGate at the main office, subnet
192.168.1.0There are several hardware-based IPSec VPNs for remote
locations:Remote office 2, subnet 192.168.2.0Remote office 3, subnet
192.168.3.0Remote office 4, subnet 192.168.4.0and so on.Th...
FortiClient 5.2.6.0664 and newerHello, does anyone know how FortiClient
might be interfering with Deltek Ajera? The trouble comes when following
a link (Time & Expense) that produces a pop-up window just prior to
opening a new browser window. Uninsta...
Fortigate 90D, v5.2.11,build754FSSO 5.0.256 on DC running Win Server
2012 R2 I see from the log that it's having problems accessing the
registry, but I've already confirmed that the service account has full
privileges (and it's an admin account). I c...
Hello, has anyone accomplished this with Internet Authentication Service
(Windows Server 2003)? The guides all seem to be written for Windows
Server 2008 and up. Thanks.
Hello I just replaced my old FortiGate 100 with a new FortiGate 90D. I’m
trying to get SSL-VPN clients to work again. I’ve added my LDAP server
under User & Device > Authentication > LDAP Servers.I’ve defined a VPN
Users group under User > User Group...
The wireless problem was resolved by switching to bridge from tunnel
mode so the wifi users are on the internal subnet. I thought it would
work the other way with my wireless -> internal and wireless -> external
policies.
Thanks Ede, Dave I'm using the VIP as the destination address as this
article advises. I wanted to avoid using external IPs from the LAN, but
even with a local record for mail that resolves to the server's internal
IP, things on the LAN seem to insis...
Answer: Yes, internal -> internal policies are now required for internal
access to internal servers by external IP. Thanks again. Thanks, Ede.
I've had VIPs set up on the new FortiGate from the beginning. They're
configured identically to the old For...
Thanks, Ede & Dave.None of the servers are on the DMZ. All are on one
internal interface. The only difference I found between the old and new
FortiGate was the "Enable DNS forwarding from" option in the old one. My
LAN’s clients can find the server b...