Hello FML admins FortiMail 7.6.1. We have an issue with one remote mail
server of "somedomain.com". The issue is more about TLS than SMTP. When
we send an e-mail to that domain they receive successfully.However when
they send us an e-mail from the sa...
Hi security adminsUsually when I integrate FML or FWB, I don't use IPS
profile (or any other security profile) in the FGT firewall rule that
forwards SMTP traffic to FML and HTTPS traffic to FWB.In my
understanding, using security profiles at FGT lev...
Hi FGT adminsI have one FGT 101F with FOS 7.2.10.I found the following
config error.FGT # get system startup-error-log >>> "set"
"gui-endpoint-control-advanced" "enable" @ root.system.settings:command
parse error (error -61)The error is "probably" du...
Hello FAC adminsI'm working on FAC 6.6.2.I noticed that FAC's local LDAP
can be used only for local user DB.So far I mainly used it as RADIUS
server (Corp LDAP as back-end) in order to add MFA.But now following our
new requirement I didn't find a way...
Hi EMS/FGT adminsWhen creating ZTNA proxy rule (in Policy & Object >
Proxy Policy) for clients that are off-fabric, is there anything valid
that we can put in "Source" field other than "all"?Trying to put the
public source address of the client, or e...
Here are some steps I suggest for troubleshooting.Make sure time is
synchronized between the two firewalls (for correct log aggregation)Make
sure rekeying time is the same on both firewallsEnable timestamp in FGT
IKE debug logs so you can aggregate e...
Hi DamianYou can create a policy to deny traffic going to ISDB "IP
Reputation Database"FortiGate can't know what is installed on your
computer, but can guess (by traffic signature) which application is
sending the traffic from the comuter. You can us...
Probably some related traffic is denied on the FortiGate.I don't know
the services that should be opened on the FortiGate so you can search
the PCs, but you can have a look in the FGT's traffic log to see which
traffic is blocked when you try to sear...
Hi DoncaI'd say the image you downloaded may not be suitable for
Proxmox, even if it is for KVM.Because it seams virsh and sudo are not
available on Proxmox hypervisor (I don't know well Proxmox but that's
what I understand from your error messages)....
