Re: Fortigate API - Remove address from group addr...

pminarik · 08-07-2024

Description This article describes a script for automatically compressing FSSO Collector Agent's debug logs for the purposes of extending the log coverage and decreasing the total log size on disk, and provides example guidelines for implementing it....

pminarik · 02-22-2024

Description This article describes how to configure automation stitches to update DNS records hosted in Cloudflare upon DHCP lease renewal or PPPoE (re)connection, effectively creating a dynamic DNS (DDNS) setup. Scope This guide applies to FortiGate...

pminarik · 12-15-2022

Description This article discusses the details of the static DNS filter's matching logic, with examples provided to illustrate the behavior. Scope The DNS filter operates only on DNS traffic and filters only domain names. If it is wanted to take spec...

pminarik · 05-25-2022

Description This article describes how to configure a webhook automation stitch that posts a message into a chosen Discord channel when the stitch is triggered. Scope This guide is applicable to any FortiOS version that supports webhook automation ac...

pminarik · 08-29-2016

DescriptionAfter creating a new DLP sensor by cloning an existing one, changing the file-type filter on one changes the other as well.SolutionThis happens because the file-type filters are separate objects referenced by number in the sensor’s configu...

pminarik · 12-19-2024

Do you have set to 1 as well?

pminarik · 12-19-2024

You can have a look here at the VLAN options available for FortiGate interfaces: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Hardware-switch-Software-switch-VLAN-switch-Use/ta-p/210153 based on your description, any chance the VLAN swit...

pminarik · 12-18-2024

I don't think you'll be able to handle this without TAC support. This is not the usual BIOS boot menu where you would be able to TFTP upload a FortiOS firmware image, so presumably something goes wrong before that usual boot menu is reached.

pminarik · 12-18-2024

Your firewall policy screenshot shows "SSL Inspection: no-inspection". You need at minimum "certificate-inspection" (For webfilter rating/blocking ONLY), or "deep-inspection" for inspection of the inner content (e.g. antivirus).

pminarik · 12-18-2024

Can you tell us what exact model is this?From the screenshot I can't tell if it's literally a FGT-30 (no letters at the end), or if you obfuscated that part with the white rectangle seen in the picture.

User Statistics

User Activity

Troubleshooting Tip: Automation Script for FSSO Collector agent debug log compression and archiving

Technical Tip: Using Automation Stitches with Cloudflare API for Dynamic DNS (DDNS) Functionality

Technical Tip: DNS profile - Static Domain Filter Matching Logic

Technical Tip: Discord Webhook for Security Fabric Automation Stitches

Technical Note: DLP - Changing the file-type filter of a cloned sensor

Re: Prompt Username = 0

Re: Combine "VLAN per Port" with "VLAN per ID"

Re: Fortigate BMR-RX Boot Loader

Re: Fortigate 30G can't add AntiVirus and Web Filter profiles to Firewall Policies

Re: Fortigate BMR-RX Boot Loader

Re: Fortigate API - Remove address from group addr...

Re: Rest Api - FGT - 6.4.2 - Fortiview

Re: FortiOS 7.6.0 Build3401 - RadSec TLS 1.3 not p...

Re: FTM Push Notification

Re: Addresses vs Wildcard FQDN Addresses

Re: Issue with FSSO Agent Communication on seconda...

Re: FortiAuthenticator as intermediate LDAP for Co...

Re: APP_FILTER blocking connection altough categor...

Re: reducing brute force ssl vpn login attempts

Re: When Fortigate integrates with FortiAuthentica...

Fortinet Training Institute

KCS