I have the following and working on upgrading to 6.4 from 6.2. This is
my first major upgrade and not sure the best way to go about
it.FortiGate's on 6.2FortiEMS & client 6.4FAZ - 6.4 (with 6.2 adom)FMG -
6.4 (with 6.2 adom)My questions are.If I upgr...
I would like to use DHCP on the gates, but use DNS on my windows 2016
server. Surly some people are doing this right? I found this article and
it sounds exactly what I want. However I can't get it to work. Is anyone
doing this https://kb.fortinet.com...
New to fortigate VPN and found out if the user loses internet for just
10 seconds the VPN will disconnect and they have to go through the login
and MFA process. Is there a setting to have them reconnect without
authentication if they only disconnecte...
I currently have ADVPN setup with BFD enabled on my VPN interfaces and
BGP keeps flapping a bit. I have adjust the times to fix the flapping
issue by settings the following commands and left the retries to 3. I
might be able to lower the times, but w...
I am also having the same issues I would like to use DHCP on the gates,
but use DNS on my windows 2016 server. Surly some people are doing this
right? I found this article and it sounds exactly what I want. However I
can't get it to
workhttps://kb.fo...
Below is the combination of stuff I used. I also have some template that
someone else sent me that really helped out.
http://cookbook.fortinet....redundant-hubs-expert/]https://web.archive.org/web/20180623032835/http://cookbook.fortinet....redundant-...
I did not get this to work as I wanted. I did get it to work with 2 hubs
but it is not true SDWAN as I did a primary and backup VPN connection to
the hubs. In my case I have a fiber and a cable/DSL to all my branch
locations so SDWAN always picked th...
There are 2 styles of VPNs. There is Site-to-Site VPN. This is used when
you have 2 devices (like to fortigates) that set on the edge of the
network with a static IP from the ISP. This will connect the 2 office
together and make clients/servers routa...
I agree a DHCP relay would be very helpful. I found that fortigates do
have this function with and IPsec VPN but not SSL. I don't think it is a
limitation as cisco anyconnect can do DHCP relay via SSL vpn.