Hi there!I have a setup where I would like to allow ICMP port
unreachable packets, even though there is no matching session in the
'diag sys session list' table. FortiOS 5.4.3, with NP6. An old KB
document states this
http://kb.fortinet.com/kb/viewCo...
Hi! This is the second time I see this issue, on the same device. I have
an 80C running 4.0 MR3 Patch 3. I' ve just created two IPsec interfaces
(two tunnels), and only one of them, the later one created - can be
added to a zone. Both has no referenc...
Hello! I' ve been missing being able to set a source address when
tracerouting. Also (or instead of the above), I wish that mtr could be
added...and maybe even tcptraceroute! /Stefan
Hello! Quick question: Is anyone running a fortigate with a full
internet routing table, over BGP? If not: What fortigate would handle
it? And is there any documentation regarding this? I' ve read the "
maximum values matrix" for fortiOS 4 & 5:
http:...
Hi! One thing you can do, is to enable IPv6 over the link you want to
send youtube (Google) traffic over.It's more of a side effect, because
IPv6 records takes priority over IPv4 DNS records. /Stefan Lindblom
Just an update to what happened: I followed the upgrade path, and did
the following: Upgrade to 4.3.10 - when fine, took ~5 minutes. Upgrade
from 4.3.10 to 5.0.2 - the firewall never came back up. Did not get any
output in the console on reboot etc. ...
Hm okey. As I wrote earlier in this thread, it started working for me
(again) using windows deployment services, on a windows server 2008.
...pxebooting a new Lenovo laptop.
Hi! First, yes, I do think it supports over 255 DHCP leases on the same
interface without problems. Follow up questions: Why would you want
~2000 devices on the same subnet using dhcp? (Or well, actually 65534
devices (even if the rest is not dhcp) s...