We are testing DNS on a FGT 201E running FOSv6.0.8 and having issues
with incorrect behaviour with CNAME entries. I am not finding a lot of
discussion anywhere on FGT dns which leaves me to believe this is likely
not a well used feature. incorrect re...
I have a need to for my 140D running FOS v6.0.4 to authenticate an
interface to an upstream device via 802.1x. To be clear I need the the
supplicant running on the FGT and authenticating the FGT, not a
downstream client. After going through the CLI r...
rpedrica wrote:Kevin Shanus wrote:My issue was that I upgraded 200E to
6.2.4 , 80E to 6.2.4 and FAZ to 6.2.5. 6.2.4 has DoS issue which breaks
VIPs6.2.X changes SSL Inspection w/ SSH which broke DUO 2FA for me, fix
was easy, had to exclude url from i...
Don't blame the fgt for an improper policy. Block uncategorized
websites. Will it create more work for you? Most certainly it will but,
these things this should get blocked. It is near an impossible task to
classify as they come up. So you can expect...
Updating this though it seems no one cares. My most excellent and
awesome FortiCrew offered to test this on some 6.2.x fgts in their lab.
This made me realize I could test it very quickly with a 6.2.2 box I had
on the same network here. Sixty or so s...
I'm not sure what you're talking about other than perhaps the fact I am
using two different name server destiny and matthew/1 and 11/FGT and
bind. Nothing has been fat fingered. The FGT is not resolving the cname
as it should be as evidenced in the p...
