Re: FortiOS 6.2.9 list files in filesystem CVE-202...

Yurisk · 12-22-2024

fnsysctl is frequently helpful in troubleshooting Fortigates, and while its options are mentioned in the Forums here and there, no single article lists them, and not all options are mentioned, so I wrote a post to summarize the info.Originally posted...

Yurisk · 12-15-2023

Good day everyone,I added to my repo folder with FortiAnalyzer Handlers collection ready to use.Your feedback, and ideas for new Handlers are always welcome.Repo: https://github.com/yuriskinfo/Fortinet-tools/tree/main/Fortianalyzer-handlers Thanks.

Yurisk · 11-28-2023

Good day everyone, hope you all are doing well. I created a Github repo where will collect scripts, tools, anything that helps in daily work with Fortinet products.So far put a collection of Fortigate automation stitches (21) you may find helpful. Ne...

Yurisk · 05-23-2023

Good day everyone, was wondering - I am reading Fortinet documentation a lot (here in community "Tips", admin guides etc.) and sometimes stumble on incorrect/outdated or plain typo/incorrect info. Is there a way to alert someone on that?Thanks E.g. h...

Yurisk · 03-16-2023

Good day everyone, here is a guide I wrote to harden your Fortigate VPN SSL in additional ways.Your feedback is welcome and will be included in the updates.Linkedin: Fortigate VPN SSL Hardening Guide Thanks P.S. Tried to upload the original PDF but s...

Yurisk · 12-23-2024

Moving VPN SSL from WAN to Loopback:Create Loopback interface with internal IPChange SSL VPN Settings to listen on this Loopback interfaceCreate VIP portforwarding for SSL VPN port Create policy WAN -> Loopback allowing SSL VPN port by using the crea...

Yurisk · 12-23-2024

Back to what you are trying to do - it is NOT possible to run iperf with Fortigates as client and server on both ends.

Yurisk · 12-23-2024

Not an answer, just an observation - in my many years with Fortigates I am yet to recall the case when it changed ifindex dynamically and not after upgrade/config restore from another device or other config manipulations. By ifindex we talk about sho...

Yurisk · 12-23-2024

Conserve Mode happens when Foritgate memory usage passes certain threshold - ~ 90% used, configurable. The chances are this is some process leaking memory, and in this case you will only know which one if you enter the FGT once it entered/immediately...

Yurisk · 12-23-2024

As others have said - yes, you have to configure SMTP server for forwarding alert mails OR, as Toshi mentioned, make sure there is a default by Fortinet mail server System -> Settings. One caveat with using default Fortinet mail servers - they are pr...

User Statistics

User Activity

Fortigate fnsysctl command options with examples

Collection of Fortianalyzer Handlers

Collection of Fortigate automation stitches

Is there a way to make feedback on the official documentation?

Fortigate SSL VPN Hardening Guide

Re: SSL VPN Loopback Address

Re: Run the diagnose traffictest between two Fortigate

Re: SNMP ifIndex Persistent Command for FortiGate Firewall

Re: What does it mean when firewall goes to Conserve Mode

Re: How to configure firewall to receive email messages

Re: FortiOS 6.2.9 list files in filesystem CVE-202...

Collection of Fortianalyzer Handlers

Re: Netflow

Fortigate built-in iperf tool helps a lot in netwo...

Re: Detailed log of configuration changes

Re: Automation Configuration Receive SSL VPN E-mai...

Re: Fortianalyser MFA

Re: How to see if DNS server send a NXDOMAIN error

Re: Block country but allow specific IP addresses

Re: Separate anti DDoS quarantines

Super User