Description This article describes how to configure the automation
stitch for sending notifications to Microsoft Teams in the event of a
change in BGP status, Admin login failure, IPSec tunnel down, and so
forth. Scope FortiGate. Solution To send a n...
Description This article describes the configuration of traffic shaping
for the web filter category to limit bandwidth usage. Scope FortiGate.
Solution In the campus, branch, and Internet of Things (IoT) networks,
users are allowed to access the spec...
Description This article describes configuring FortiGate to block DOS
attacks for specific servers from trusted networks. Scope FortiGate.
Solution Servers are deployed in the DMZ, access to the servers is
secured, and limited access is allowed to tr...
Description This article describes the interface type and requirements
to make the interface available to add as an LACP member. Scope
FortiGate. Solution When an interface needs to be added as a member of
the LACP interface, it should pass the below...
Description This article describes how to block local network
communication to Botnet IPs and Botnet Domains. Scope FortiGate.
Solution If a LAN PC or IOT device is compromised, it will generate
traffic or try to communicate with Botnet IPs and Botne...
yes, you could achieve it. Make sure to add dailup tunnel subnet in
phase2 selector of the site-site tunnel. in FGT1 source :10.5.41.0/24
dest :192.168.8.0/24in FGT2 source 192.168.8.0 dest :10.5.41.0/24 In
FGT2, add a routeto 10.5.41.0 via tunnel in...
Hi Imel, I believe, you need to create ip pools for each nat ip address.
Later call the same in specific soucre and destination policy. Please
refer to
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-SNAT-with-IP-pool/ta-p/...
hi, the script is correct. You can also follow alert mail for concerve
mode and logs collection
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Automation-stitch-for-the-conserve-mode/ta-p/240696#:~:text=FortiGate%20by%20default%20turns%20o...
hi Abel,Please make sure you have spit tunnel enable in the sslvpn so
you that only remote subnet are pointing todards sslvpn adaptor in local
pc. Better to check routing-table in the pc before and after connecting
to sslvpn. use "route print" if its...
Hi, Please try the solution provided in
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Error-The-VPN-server-may-be-unreachable-14-for/ta-p/190882