Re: Using FortiGate as the DNS server

Chandra_FTNT · 10-26-2024

Description This article describes how to enable and also view logs for the URLs which were exempted via SSL/SSH exception. Scope FortiGate 7.4 onwards Solution Requirement : Need to enable SSL/SSH exempted URL logging and how to view the logs Soluti...

Chandra_FTNT · 10-26-2024

Description This article describes how to block all .exe files when it is necessary to allow a specific URL to download an exe file without enabling multiple other UTM features on FortiGate. Scope FortiGate 7.4 onwards Solution Requirement: Block all...

Chandra_FTNT · 09-27-2024

Description This article describes how to restrict admin users from taking only configuration backups on FortiGate. Scope FortiGate v7.2.9, v7.4.4, 7.6 onwards. Solution Requirement: Create a dedicated administrator account to take configuration back...

Chandra_FTNT · 10-01-2020

Description This article describes how to add static DNS entries to resolve domains that are hosted internally and have FortiGate to act as a DHCP and DNS server to provide range of IPs to workstations. In this scenario, there is an internally hosted...

Chandra_FTNT · 06-22-2017

Description This article describes how to redirect updates such as signature updates and license syncs to a different WAN interface using the web-proxy feature on the FortiGate.Requirement: Two WAN interfaces are configured on the FortiGate but licen...

Chandra_FTNT · 12-09-2024

Please refer following KB: FortiToken setup on 100F - push notices - Fortinet Community

Chandra_FTNT · 10-10-2024

Please refer following FortiGate DNS server details for your requirement: https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/960561/fortigate-dns-server

Chandra_FTNT · 08-19-2022

Hi, Please verify if the net-device is enabled on the IPsec tunnel, there is behavior change in the firmware, please check below KB: https://community.fortinet.com/t5/FortiGate/Technical-Tip-set-net-device-new-route-based-IPsec-logic/ta-p/193618?exte...

Chandra_FTNT · 06-02-2022

Hi, When you are creating VIP for port forwarding, if you enable Port Forwarding you must provide port from external and the port used internal. As your web server using custom port Web server: 10.10.1.1:8081 You must use external also with port numb...

Chandra_FTNT · 05-17-2022

Hi Anthony, Please refer below KB to use two factor for PKI users:https://community.fortinet.com/t5/FortiGate/Technical-Tip-PKI-user-with-two-factor-authentication-for-SSL/ta-p/190956 Which firmware are you running? Regards,Chandra

User Statistics

User Activity

Technical Tip: How to enable and view logs for SSL exempted URLs

Technical Tip: Block all exe files but allow specific URL without enabling other UTM profiles

Technical Tip: Restrict admin users to take configuration backup only on FortiGate

Technical Tip: Adding static DNS entry on FortiGate with DHCP assignment

Technical Tip: Redirecting signature updates

Re: FortiToken setup on 100F - push notices