Hello, I just ran into this: on a FGT I have two policies: One has a VIP
as destination to rewrite an ip into a different subnetThe other matches
all traffic between the involved subets and interfaces.the policies have
exactly this order. In FortiAna...
I just ran into this: I have an Adom in FMG. In this is a FGT100F I want
to use for lab purposes. It was reseted to factory default before adding
it to FMG. It added successfully and I can configure it in FMG. I was
able to deploy device configuratio...
I ran into this issue on our FortiMail and wanted to let you know: We
found a mail going out of the FML that should have been quarantined due
to failing DMARC check. However the mail went through to the user even
without any filtering. The log only s...
I have the following situation: I have a website that in our config is
allowed per cathegory due to FortiGuard rating. Now we want to
temporarily have webfilter block that site.So I added a web rating
override to a local cathegory that is set to acti...
I just ran into this: I have a FQDN that used to be rated as "newly
observed domain". I create a rating override to a custom cathegory and
added that cathegory to the list of reputable sites in the DPI profile.
The Site then worked (before that it go...
yeah thx for the hint mrsimon007.After this gues that the Session
somehow "collides" with the VIP and then FortiOS doesn't know which
destinatio to use and fails. I consider this a weird bug in FortiOS and
've opened a Ticket with TAC to have it inve...
You also could download one revision of a fgt in the adom that has the
objects from FMG device manager. This contains devic config + policy
package so has all you objects. Then find the objects in there and copy
them and the corresponding headers (e....
if you need it in more than one adom in FMG you could also promote these
to the global adom so you can assign them to any adom you have enabled
for that in the gobal one.Just keep in mind to assign ALL objects
because otherwise objects that have no r...
you could generate or import a certificate on the FGT that has the
Serial as CN.Then you could tell the FGT to use that to talk to FMG -
this step can however only be done on FGT command line): config system
central-management set local-cert Certific...