Re: FSSO with polling mode guideline

rmreddy · 01-23-2025

Description This article describes how to upgrade the firewall if the VDOM is enabled. Scope FortiGate. Solution There is speculation that if VDOM is enabled, it needs to upgrade the firmware to the specific VDOM and it does not apply to all VDOMs. F...

rmreddy · 12-06-2024

Description This article describes how to move the authentication rule to the top and the bottom in SSL VPN. Scope FortiGate. Solution To view authentication rules, it is necessary to execute the below commands. config vpn ssl settings config authent...

rmreddy · 11-01-2024

Description This article describes how traffic flows when NAT is enabled in the IPv4 policy. Scope FortiGate. Solution When NAT is enabled in the IPV4 policy, the traffic will get NATted to the IP of the destination interface and will be forwarded to...

rmreddy · 11-01-2024

Description This article describes why it is impossible to configure a hardware/software switch, VLAN interface as both an HA monitor and heartbeat interfaces. Scope FortiGate. Solution Port9 is configured as a software switch, and a test VLAN interf...

rmreddy · 10-25-2024

Description This article describes why it is impossible to select the interface which has been selected in the management interface reservation in a policy or route. Scope FortiGate. Solution When the Management interface reservation is configured in...

rmreddy · 01-23-2025

Hi, If not looking to install FSSO agent in the server, follow the below link for your reference. https://docs.fortinet.com/document/fortigate/7.6.1/administration-guide/888827/poll-active-directory-serverIf want to install FSSO agent but not DC agen...

rmreddy · 01-21-2025

HiPlease go through the below link for your reference.https://community.fortinet.com/t5/FortiGate/Technical-Tip-FSSO-Agent-in-polling-mode/ta-p/228136

rmreddy · 06-21-2023

Hi, As you are configuring for SSLVPN using MAC based Please follow the below link for your reference how to restrict VPN based on MAC address.https://community.fortinet.com/t5/FortiGate/Technical-Tip-MAC-Address-check-on-SSL-VPN-connections/t... How...

rmreddy · 06-21-2023

Hi, However, if you are looking for normal IPV4 policy, you can refer the below link for your reference where special licensing is not required.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-the-MAC-address-based-polici...htt...

rmreddy · 06-21-2023

Hi, Please follow the below link for your reference how to restrict VPN based on MAC address.https://community.fortinet.com/t5/FortiGate/Technical-Tip-MAC-Address-check-on-SSL-VPN-connections/ta-p/194337 However, follow the below link regarding the M...

User Statistics

User Activity

Technical Tip: How to upgrade firewall if VDOM is enabled

Technical Tip: How to move authentication rule to top and to bottom in SSL VPN

Technical Tip: How traffic will be forwarded when NAT is enabled in IPv4 policy

Technical Tip: It is impossible to configure a hardware/software switch, VLAN interface as both HA monitor and heartbeat interfaces

Technical Tip: Impossible to configure policy and routes with the interface selected for management interface reservation