I ran into an issue that a working web filter is not working anymore on
several sites when the connection between two sites is switched to IPSEC
VPN instead of a native MPLS link.SoWorking situation:Site B -> MPLS
Link -> Site A -> Policy with Web Fi...
Anyone doing SNMP monitoring on Fortigate devices?I'm getting different
values when reading memory used values with SNMP as opposed reading them
from some CLI and GUI.When reading SNMP OID
.1.3.6.1.4.1.12356.101.4.1.4.0 i
get:SNMPv2-SMI::enterprises....
Hi, Does anyone know if Fortigate VPNs can be used for the IOS per-app
VPN functionality deployed using Airwatch, Intune, XenMobile etc? For
example intune doesn't mention Fortigate as supported connection
type:https://docs.microsoft.com/en-us/intune...
I experience issues on several different FortiGate 60E firewalls with
firmware 5.4.2 and 5.4.3.After a period of uptime I experience that new
changes (for example a new created policy) aren't working.When doing
troubleshooting in the cli I get the er...
Is it possible to create an IPSEC dailup VPN connection without changing
the client DNS servers? The default options are to use System DNS or
specify a DNS server but we need a solution which doesn't specify a DNS
server at all so the clients will ke...
Hi Pdxwolf,Well we didn't. Even with support and other experts we were
not able to build a proper working solution.We discarded the ADVPN
concept and are using plain redundant VPN tunnels now which work like a
charm.
A lot of sites don't work properly. Some simple sites work.Fortinet has
researched this problem and found out this is an issue with the filter
in combination with fragmented packets. For now i have decreased the MTU
size to 1300 after which the filte...
Hi Gerald,I have some info for you after some extensive troubleshooting
today.You can workaround this problem when you change the web filter
from proxy based to flow based scanning.So probably you can use that as
workaround as we did.Fortinet is curr...
Waited long time for this release to speed up loading policy and object
pages.Now we are stuck with 'diag sys top-summary' bug. Always replacing
bugs with new bugs :(And now? we have to wait for a couple of months for
5.6.4 to be released to get this...
