HI, we periodically very often loose connection to the web interface of
the fortigate, connection lost message pops up , when ping to it stable
less than 1 ms, and ssh is not lost at all. FGT500e version 5.6.5 .Any
idea how to fix this? there are no ...
Hi, we have ssl vpn users group connecting to the office remotely so
they are using policy allowing from wan to lan . is it possible to apply
that group to another policy then after they passed 1st policy on the
same firewall? So 1st policy then 2nd ...
hi, is there command to check mac add of the device connected to the
port of the fortigate? I see port is up and trying to figure it out what
is connected on it.
Hello, i have a users trying to use sip softphone remotely. When ssl vpn
is not connected their calls are connect and no audio problem, BUT when
ssl vpn is connected no audio between callers and callee. I found that
ssl vpn by default uses TCP but au...
Hi ,was watching couple videos about sdwan and how to set it up, all
videos shows to send all traffic via sdwan. But is this possible to send
some traffic via sdwan and other via regular wan interfaces and via
ipsec also ? Can anyone share any link o...
make sure sip alg is disabled, create voip services with rtp and sip
ports and allow them in the policy to/from sip server , create vip with
ur sip server and include it to that policy. the best practice is to run
voip inside of the ipsec vpn (if bet...
"Each policy is bound to the destination and once it matches, it would
exit from the policy checking." Do u mean ssl_vpn_users traffic will be
checked by policy only 1 time and will not be checked for 2nd matching
policy ?Thanks
My goal at this case not to use " if not this > then check/use this
policy " logic, but " if this policy passed then use this policy" logic.
Is it possible? Will it work this way if I will have policy one after
another ? For example ssl vpn user conn...
yes, right but that shows interface only as a lan , it doesnt show what
is coming from port 1 or port 2 or port 10. i am looking for something
like "show mac add int gi1/0/2 " is it possible?
