Re: Fortigate API - Remove address from group addr...

pminarik · 08-07-2024

Description This article describes a script for automatically compressing FSSO Collector Agent's debug logs for the purposes of extending the log coverage and decreasing the total log size on disk, and provides example guidelines for implementing it....

pminarik · 02-22-2024

Description This article describes how to configure automation stitches to update DNS records hosted in Cloudflare upon DHCP lease renewal or PPPoE (re)connection, effectively creating a dynamic DNS (DDNS) setup. Scope This guide applies to FortiGate...

pminarik · 12-15-2022

Description This article discusses the details of the static DNS filter's matching logic, with examples provided to illustrate the behavior. Scope The DNS filter operates only on DNS traffic and filters only domain names. If it is wanted to take spec...

pminarik · 05-25-2022

Description This article describes how to configure a webhook automation stitch that posts a message into a chosen Discord channel when the stitch is triggered. Scope This guide is applicable to any FortiOS version that supports webhook automation ac...

pminarik · 08-29-2016

DescriptionAfter creating a new DLP sensor by cloning an existing one, changing the file-type filter on one changes the other as well.SolutionThis happens because the file-type filters are separate objects referenced by number in the sensor’s configu...

pminarik · 08-29-2024

I don't even think the client's hostname is included in mode-config, so this may not even be possible purely with mode-config. (at the very least it is not listed here: https://datatracker.ietf.org/doc/html/draft-dukes-ike-mode-cfg-02#section-3.4 )Fo...

pminarik · 08-28-2024

The "continue without login" prompt usually happens after a connectivity-probe sent by the device detects a portal. You could in theory find out what those probed destinations are (this info should be searchable online) and exclude them from captive ...

pminarik · 08-20-2024

This is a known limitation, caused by the fact that in this situation the Domain controller records logon events for rdp-user@example.com for BOTH the source PC and the RDP destination PC. The only proper solution is the RDP override settings, suppor...

pminarik · 08-19-2024

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/180888/web-portal-configurations You can enable the "Limit Users to One SSL-VPN Connection at a Time" option. This is a per-portal setting and applies to both web-mode and tunnel...

pminarik · 08-19-2024

I strongly recommend to open a TAC ticket to investigate this further, in detail. I have no expectation of the native client supporting a two-step 2FA (ask for username+pwd first, then for OTP code) in its GUI for L2TP, but if we assume that the conf...

User Statistics

User Activity

Troubleshooting Tip: Automation Script for FSSO Collector agent debug log compression and archiving

Technical Tip: Using Automation Stitches with Cloudflare API for Dynamic DNS (DDNS) Functionality

Technical Tip: DNS profile - Static Domain Filter Matching Logic

Technical Tip: Discord Webhook for Security Fabric Automation Stitches

Technical Note: DLP - Changing the file-type filter of a cloned sensor

Re: DHCP Relay for Multiple Dial-Up IPSEC Tunnels

Re: Fortinet Wifi Captive Portal

Re: FSSO creating Issues when taking RDP of other systems using different domain user account

Re: SSL VPN - One ID per One user concurrent.

Re: Windows Native L2TP Not prompting MFA

Re: Fortigate API - Remove address from group addr...

Re: Rest Api - FGT - 6.4.2 - Fortiview

Re: FSSO with FortiAuthenticator

Re: Captive Portal redirection

Re: FortiOS 7.2.8 and FSSO agent

Re: SSL VPN - One ID per One user concurrent.

Re: No access to Navision SQL server from FortiCli...

Re: Accomplish FSSO user/user groups without LDAP

Re: Renew SSL Certificate Error

Re: Qualys scan vulnerability qid 150004 FortiOS 6...

KCS

Fortinet Training Institute