We're having an issue with IPSEC VPN bewteen two FG60D's (interface).
Static IP on both ends. On one side, we have two WAN circuits: an
existing (wanA) and one new (wanB). We've had a functional tunnel on
wanA for quite some time and no issues, but w...
Hi All, We are having an issue with DCHP on a FWF40C (4.0 MR3 P14) where
wireless clients do not get an IP. Wireless clients are the only ones
affected. The resolution is simply to issue the command " exec dhcp
lease-clear" . Fixes it instantly and e...
We seem to have an issue when a point-2-point VPN is used in conjunction
with a dial-up VPN (on the same IP). Only seems to happen when remote
end has DynDNS. We get a pre-shared key mismatch error on the VPN dial
interface, even though the request i...
We have a HP OfficeJet Pro 8500 A910 printer (wifi) that is unable to
connect to the wlan interface on our FWF-40C. The 40C came stock with
4.0 MR3 P12 and we patched to P14 after experiencing this to see if it
made any difference. WiFi Settings: Sec...
Our PCI Compliance vendor is failing our scans due to the following
vulnerability: (Environment Fortigate 60B with FortiOS 4.0 MR2 Patch 15)
THREAT REFERENCE Summary: SSL server accepts SSLv2 protocol Risk: High
(3) Port: 8900/tcp Protocol: tcp Threa...
Turns out there is some type of IPSEC incompatibility in a topology that
includes a Juniper SRX240H2 (provided by ISP) in front of Fortigate.
Fortunately the ISP allowed us to connect their fiber ONU/ethernet
handoff directly to the Fortigate. Tunnel...
Was any other Cisco dial-up client configuration required for IPsec
connections to Fortigate? We have a traditional forticlient dial-up
configuration as well one that works with IPsec on iOS products but can'
t get the Cisco dial-up client to work. T...
The issue ended up being related to improper configuration. Specifically
an overlapping subnet on this particular WiFi interface and the dial-up
VPN interface.
Had not thought to check the order of policies, one of the dial-up
policies was not last, which I have changed so that it is. Also, I was
using " any" as destination, not initially but I think in the process of
troubleshooting and removing/recreating...
