Description This article describes best practices for hardening the
FortiAuthenticator. Scope FortiAuthenticator all versions. Solution
General considerations: FortiAuthenticator can act as a server for many
protocols like RADIUS and SAML primarily, ...
Description This article describes digital certificates and explains the
use and validation of them. Certificates come with the use of the Secure
Sockets Layer (SSL) or its successor, Transport Layer Security (TLS, the
latest version 1.3). Certificat...
Description The LCD shows the error 'SWC5008 Critical'. SWC5007 might
also be displayed. According to this forum thread of Dell, this is
related to a communication issue with the left front Panel, either by
physical connectivity problems, so check th...
DescriptionThis article describes how to configure FortiNAC as a RADIUS
proxy.This can be useful in case of implementing wired or wireless
802.1x authentication.Related
link:https://docs.fortinet.com/document/fortinac/8.6.0/administration-guide/21455...
Description This article describes how to configure FortiNAC and
FortiGate to poll the sessions to FortiNAC.Related
link:https://docs.fortinet.com/document/fortinac/8.6.0/administration-guide/473911/firewall-session-polling
Normal 0 false false false...
Hi, guessing this is some device, laptop or some smaller device, then
try to do a packet capture on FortiGate. If the device is downloading,
there should be a bunch of packets going forth and back. diag sniffer
packet any 'port 69' 4 0 a will give yo...
Hi merica, for the FortiGate there is no difference of the certificate
being on a smart card or not. The smart card contains minimum the
private key of a certificate. The private key is used to identify the
holder of the certificate since only the ho...
Hi pjassogc, first things first: On Windows it asks me to accept the
certificate This should not happen. That indicates that the FortiGate is
supplying a certificate to secure the connection, where the client is
not trusting it. So you get the warnin...
Hi, have a look at your statement - "from time to time". Do you see a
pattern to it? So after 1 hour the term is kept, after 12 hours the
search is reset? That is what it sounds like, and I would see if there
is such a pattern; the browser might be a...
Hi Pradeep, with any timeout, go with a packet capture. "Timeout"
usually refers to one node sending a message and there is no response.
No response in turn can be comprised of that the other node did not
receive the message, or that the other node d...