Re: FortiNAC deployment

AEK · 12-08-2024

Hi EMS/FGT adminsWhen creating ZTNA proxy rule (in Policy & Object > Proxy Policy) for clients that are off-fabric, is there anything valid that we can put in "Source" field other than "all"?Trying to put the public source address of the client, or e...

AEK · 12-08-2024

Hi FAP & FSW adminsIf I'm not misunderstanding, since managed FAP's and FSW's configs are pushed from FGT, then it should not be required to follow upgrade paths for FAP and FSW. Is this correct?

AEK · 12-01-2024

Hi FML adminsOn my new FML 7.6.0 I cant get CLI working from the GUI.Each tim I try run it I get this message:I try Ctrl-C, Enter, right-click, Ctrl-d or whatever but doesn't change anything.Updated to 7.6.1 but the issue still the same.While ssh con...

AEK · 11-28-2024

Hi FNAC adminsIn FortiNAC or FortiNAC-F, is there a way to restrict access to admins to some containers (or switches), in such way some admins can manage some switches, and some other admins can manage some other switches.

AEK · 11-27-2024

HelloIn some cases I noticed the temporary license expires about 5 to 10 days before time. I mean instead of expiring after 60 days it expires after 50 or 55 days.I've seen this behavior two times, one on a FortiWeb an one other on a FortiMail.Did an...

AEK · 12-10-2024

In addition to Bon's suggestion, in case 7.4.0 gives the same result then you may also try with older version, like 7.2.5 or 7.0.13.

AEK · 12-09-2024

Hi RamadanYour firewall will log the traffic even if your server rejects the connection request. That's the normal behavior, because the firewall sees the request and sees the connection closure, so it just logs what it sees.

AEK · 12-09-2024

Hi PotatoI don't think it will work like that, because the FG Master may not see the CheckPoint Master.Even in AA-HA, FG master is the one who receives the incoming traffic, so you need a switch between the two firewall clusters.

AEK · 12-09-2024

If you buy a second hand FGT, make sure you can ask Fortinet to move the ownership from the original owner to you. I know this is not always the case, but I don't actually know under which conditions it is possible. Maybe some experienced user can pr...

AEK · 12-09-2024

HiCan you check on FGT if the RADIUS authentication still works?In RADIUS config, just perform an authentication test, enter user and password and see if authentication is successful.

User Statistics

User Activity

Source address in ZTNA proxy policy

Upgrade path for managed FortiAP and FortiSwitch

FML 7.6 CLI issue

FortiNAC restrict access to container

Temporary license premature expiration

Re: Forticlient vpn 7.4.1 MFA issue

Re: cant find access log for non succesful connection

Re: Question regarding Firewall Active-Active Layer 2 HA design

Re: What’s the cheapest way to get support for a used Fortigate?

Re: Forticlient vpn 7.4.1 MFA issue

Re: FortiNAC deployment

Re: FSSO - Authorization issue

Re: FortiGate does not send Two-Factor activation ...

Re: What da heck is going on with Version 7.4.4

Re: Layer3 Fortiswitch

Re: Integration of FortiGate, Huawei NAC, and Fort...

Re: ZTNA tag for internal traffic filtering

Re: FSSO - Authorization issue

Re: FGR60 port(n) and WAN in Hardware Switch

Re: FGR60 port(n) and WAN in Hardware Switch

Super User