Re: Fortigate SSL Offloading with SNI

slemke · 04-11-2023

Hello everybody, we are actually using on a Fortigate (running 7.0.x OS) the SSL Offloading Feature for checking inbound-Traffic (!) to an Web-Server located in our dmz: config firewall vip edit "Loadbalancer SSL www.example.org" set comment "for IPS...

slemke · 02-01-2021

Hello everyone, I would like to use the integrated Windows 10 IKEv2 tunnel for a connetion to a Fortigate (100E, v6.4.4) with authentification against my Windows Active Directroy (Server 2019). With a local user on the Fortigate my tunnel is running ...

User-Login on Fortimail in Gateway Mode? · 01-22-2018

Hello, we are actually evaluating a Fortimail Box. We are using the box in gateway mode for filtering incoming Mails. -> MX-> fortimail -> my mail server The mailboxes itself are located on "my mail server". Now I would like to login to the fortimail...

slemke · 04-25-2017

Hello, I have a weird problem with webfiltering, certificate inspection (NOT deep inspection) and google.com on a Fortigate 50E, v5.4.4 When I try to open google.com I get an ERR_CONNECTION_CLOSED - on several PCs with FF,IE,Chrome - all the same err...

slemke · 08-12-2016

Hello, i have been asked for a Layer2 Site to Site VPN (I would not like to discuss an alternative - at this moment - because this is the technial requirement of the customer..). I have done some research here in the discussions and found several sta...

slemke · 08-28-2024

Hello, same problem here today.After some investigating it turns out that this is an MTU / Fragmentation issue. The MTU for IPV4 pakets on DS-Lite Connections is ~30 Bytes lower.Lowering the MTU on the network interface of the device is one option (n...

slemke · 04-21-2023

Hi! Thanks a lot, that works. I have to use two internal IP-adresses - but that´s not the problem. The problem - only using one external adress - was solved.The SSL-Certificate was a Wildcard-Cert - so, this was fine. I guess this is the only way to ...

slemke · 04-21-2023

Hi!this did not work, my backend Server complains about a mismatch between SNI und HTTP-Header:Hostname www.example1.org provided via SNI and hostname www.example2.org provided via HTTP are different The method @lol described has worked. But it´s not...

slemke · 02-01-2021

Hello, I have just installed the NPS Server and got it working with IKEv2 and authentification against my Active Directory.It would be interesting if my unterstanding regarding LDAP is correct? Sebastian

slemke · 02-01-2021

Hello, self-reply ;) It seems the problem is that the passwords are not stored clear-text in the AD - but the firewall needs them in clear text for this authentification type.Enabling storing the passwords in clear text is not an option (so I will ch...

User Statistics

User Activity

Fortigate SSL Offloading with SNI

Windows-VPN (IKEv2) Authentication against Server 2019 Domain Controller

User-Login on Fortimail in Gateway Mode?

Problems with "certificate inspection" on Google.com

Site 2 Site VPN Layer 2 (L2TP?)

Re: FortiClient ipsec VPN over DS-Lite