Can I add addresses on FortiGate-600D-LENC with firmware version 5.4.1
to apply policies to them not individually, but by downloading a text
file or a one-time list of addresses? I've seen this on newer versions
in tutorial videos, but I can't find s...
I can create a GeoIP and select a country to distribute the rules to the
region at once. But what if I want to add or exclude some addresses in
this list? I have Fortigate-600D-LENC (that is, it is not connected to
cloud services and auto-updates) an...
I have a version of the Fortigate 600D-LENC device, that is, without
access to Fortinet cloud services and without access to FortiManager and
FortiAnalyzer. Is there a possibility on FortiOS Firmware v5.4.1 build
3753 configure automatic backup actio...
We have a basic policy to allow everything, but with Application Control
and Intrusion Protection profiles, and already above we added
prohibiting policies to specific addresses that are prohibited to
clients or who attacked us. But now we are asked ...
We have a HA active-passive cluster of two FortiGate 600D, I turned on
the standalone mode on the Master due to some
problems(https://community.fortinet.com/t5/Fortinet-Forum/accidentally-rewrote-the-interface/td-p/201847),
and I returned access to i...
Okay, that sounds great, thanks for the answer. And what if, for
example, I write 400 addresses in one group in the config and upload it,
and the limit on the number of addresses in one group is 300 pieces - in
this case, won't my entire configuratio...
Thank you, I think this is the maximum I can do in this situation. Of
course, I have already figured out myself that you can add addresses to
the policy manually, and without the ability to automatically determine
the country of the address, it seems...
The documentation on this topic says "URLs with an action set to exempt
are not scanned for viruses", but I think this is a significant decrease
in the security of our network. We need FortiGate to protect us from
traffic even from these sites, but n...
I have already tried to change the address in the data center when
connecting to the device, but in "edit port" was written "set vdom
root". In short, I write "set?" to find out which commands are available
and there is no "ip" and "mod" to change it...
