Re: SDWAN rule backup for certain traffic only

vponmuniraj · 07-20-2022

Description This article describes how to configure multicast DNAT when FortiGate is enabled with multicast forwarding. Scope FortiGate Solution Topology as below: Multicast sender -> FortiGate -> Receiver The example below shows the commands used to...

vponmuniraj · 02-22-2021

DescriptionThis article describes how to tag routes distributed by OSPF.SolutionThe example below shows commands used for redistributing static routes with a tag of 1003.Create an access list for the prefix(s).# config router access-list edit "static...

vponmuniraj · 02-22-2021

Description This article describes how to tag the default route originated by OSPF.Solution The example below shows commands used for redistributing the default route with a tag of 1002.Create an access list for the prefix(s): config router access-li...

vponmuniraj · 11-29-2020

DescriptionThis article describes how to enable username for Dialup VPN users in forward logs, web filter logs / security profile logs.SolutionDialup VPN can be configured based on the document below: https://docs.fortinet.com/document/fortigate/6.2....

vponmuniraj · 08-28-2020

Description This article previously described blocking access to a personal Google account login using application control profile. Scope Any supported version of FortiGate.Solution For information about how to block access to various websites and so...

vponmuniraj · 07-18-2022

Hi, The throughput depends on a lot of factors (protocol / application being used & the number of streams / ISP provided bandwidth / latency between the peers). The datasheet numbers can be taken as reference. You may run iperf and if you feel that t...

vponmuniraj · 06-26-2022

Hi, In your static routes (which I am assuming you use), configure only the static routes for your voice traffic over the 10M link. Do not configure a default route with "SDWAN" enable, rather only use the 200M link. Use a SDWAN rule with the method ...

vponmuniraj · 06-26-2022

Hi Mohammad, If you suspect that files are not detected as viruses when they should be. Please report them using the link https://www.fortiguard.com/faq/onlinescanner Regards,

vponmuniraj · 06-26-2022

Hi, Does the vendor need 192.168.99.0 to be source translated to 2.2.99.0? What does your current phase 2 configuration look like? Can you grab the output for the below? diag vpn tunnel list name Regards,

vponmuniraj · 06-26-2022

Hi, Check the order of the rules in the cli and move the entry to whitelist RDP to the top. For example, the entries should be similar to the below: config application listedit "RDP_allow"set other-application-log enableconfig entriesedit 1set applic...

User Statistics

User Activity

Technical Tip: Multicast DNAT in multicast forwarding mode

Technical Tip: Configure OSPF route tag for redistributed prefixes

Technical Tip: Configure OSPF route tag for default route originated by OSPF

Technical Tip: How to get username in logs for Dialup VPN user web traffic

Technical Tip: Configuring application profiles to block personal Google account access

Re: How fast could Fortigate 80F IPSec VPN be?