Re: FortiNAC deployment

AEK · 12-10-2024

Hello FAC adminsI'm working on FAC 6.6.2.I noticed that FAC's local LDAP can be used only for local user DB.So far I mainly used it as RADIUS server (Corp LDAP as back-end) in order to add MFA.But now following our new requirement I didn't find a way...

AEK · 12-08-2024

Hi EMS/FGT adminsWhen creating ZTNA proxy rule (in Policy & Object > Proxy Policy) for clients that are off-fabric, is there anything valid that we can put in "Source" field other than "all"?Trying to put the public source address of the client, or e...

AEK · 12-08-2024

Hi FAP & FSW adminsIf I'm not misunderstanding, since managed FAP's and FSW's configs are pushed from FGT, then it should not be required to follow upgrade paths for FAP and FSW. Is this correct?

AEK · 12-01-2024

Hi FML adminsOn my new FML 7.6.0 I cant get CLI working from the GUI.Each tim I try run it I get this message:I try Ctrl-C, Enter, right-click, Ctrl-d or whatever but doesn't change anything.Updated to 7.6.1 but the issue still the same.While ssh con...

AEK · 11-28-2024

Hi FNAC adminsIn FortiNAC or FortiNAC-F, is there a way to restrict access to admins to some containers (or switches), in such way some admins can manage some switches, and some other admins can manage some other switches.

AEK · 12-11-2024

Thanks for the confirmation.I also see FortiAuthProxy is new Fortinet product. First time I hear about. Thanks for the info.

AEK · 12-10-2024

Hi JerryUnfortunately on the video he is configuring FAC's front-end as RADIUS, not LDAP :(

AEK · 12-10-2024

I think the errors look different.As workaround try use "fortisslvpn" which is a NM plugin. I've been using it for a long time and it has always worked perfectly.

AEK · 12-10-2024

In addition to Bon's suggestion, in case 7.4.0 gives the same result then you may also try with older version, like 7.2.5 or 7.0.13.

AEK · 12-09-2024

Hi RamadanYour firewall will log the traffic even if your server rejects the connection request. That's the normal behavior, because the firewall sees the request and sees the connection closure, so it just logs what it sees.

User Statistics

User Activity

FortiAuthenticator as intermediate LDAP for Corp LDAP

Source address in ZTNA proxy policy

Upgrade path for managed FortiAP and FortiSwitch

FML 7.6 CLI issue

FortiNAC restrict access to container

Re: FortiAuthenticator as intermediate LDAP for Corp LDAP

Re: FortiAuthenticator as intermediate LDAP for Corp LDAP

Re: Forticlient 7.4.1.1697 on Ubuntu 22.04.5 failing to create SSL tunnel

Re: Forticlient vpn 7.4.1 MFA issue

Re: cant find access log for non succesful connection

Re: FortiNAC deployment

Re: FSSO - Authorization issue

Re: FortiGate does not send Two-Factor activation ...

Re: What da heck is going on with Version 7.4.4

Re: Layer3 Fortiswitch

Re: Integration of FortiGate, Huawei NAC, and Fort...

Re: ZTNA tag for internal traffic filtering

Re: FSSO - Authorization issue

Re: FGR60 port(n) and WAN in Hardware Switch

Re: FGR60 port(n) and WAN in Hardware Switch

Super User