Hi All, I have a scenario where I need to use the Explicit proxy and
NTLM authentication. We are replacing another web proxy solution that is
currently doing this. The authentication needs to be transparent and
current is, so the browsers are configu...
Hi Folks, I am testing Forticlient 5.6.6 on a Windows 10 Laptop and
trying to make "VPN Before Login" work. I have create an SSL VPN and
enabled this option, but when booting the machine we do not get any
options to connect to the VPN before the wind...
Hi All, Running an active passive Fortigate cluster and OS 5.4.8 - -we
need to have remote link failover working so that if a ping target
cannot be reached x times then the cluster fails over. We cannot make
any sense of the results, when the ping ta...
Hi Folks, I would like to set up a Fortigate Firewall running 5.4.7 as
an explicit proxy and have users authenticate by typing in their
username and password. I want different A/D user groups to have
different security profiles. So what I would like ...
Hi All, I have a strange problem when trying to use a client certificate
for SSL VPN authentication where the client certificate was issued by
the Microsoft CA. The certificate is a local machine certificate and was
one that the CA had already genera...
Hi James, Thanks for the feedback. I do get what you are saying, but it
seems a bit of a complicated way of doing it. With LDAP I can just add a
secondary server into the LDAP config as below: edit LDAP_Serverset
server 1.1.1.1set secondary-server 1....
Hi All,Many thanks for all of your feedback - -It is now working. I have
a couple more questions that someone may be able to help with: What is
the authentication timeout time and method - -can it be changed?I want
to add a second domain controller t...
Hi James,I will try that tomorrow. I also think it may be some settings
on the DC that need to be changed. I tried some debug like diag debug
app authd -1 and diag debug app fnbamd -1 but it didn't show anything
useful. Does anyone know if we can tes...
Hi Fishbone, That is one thing i found that was strange - when i created
the proxy policy it would not let me select any service. The only way I
could select a service was to create new ones where the service type was
"Explicit Proxy" then I was able...
Hi All, I upgraded a test 60D to 6.0.4 and attempted to set this up, but
it is not working so far so i expect I have done something wrong.When
testing using chrome browser and going to www,fortinet.com i get the
error message "access denied the page ...
