Technical Tip: FortiGate and ZSTD implementation (...

AlexC-FTNT · 04-22-2024

Description This article describes how to change the order of the rules in the route-map setup. A route map may have multiple rules that are processed from the top down, so the order of the rules is important. Scope FortiOS. Solution New rules in a r...

AlexC-FTNT · 02-28-2024

Description This article describes the implementation of ZSTD encoding and the possible workarounds for enabling access to these sites. Scope FortiOS. Solution ZSTD is a compression mechanism, lossless and faster than others extensively used so far. ...

AlexC-FTNT · 02-15-2024

Description This article describes that the Guest admin account is no longer able to see the user password in the GUI, despite having correct credentials. The Password field for the user shows 'ENC XXXX' instead of displaying the password in clear te...

AlexC-FTNT · 07-06-2023

Description This article describes the solution for removing or disabling FortiAnalyzer on FortiGate when the following error appears when attempting from:CLI: FortiAnalyzer is used by quarantine settings node_check_object fail! for status disable va...

AlexC-FTNT · 01-05-2023

Description There are certain questions from users about features that do not work as expected , or as according to the documentation. This article does not refer to these cases individually (such as misconfiguration, misunderstanding, or bugs). This...

AlexC-FTNT · 04-25-2024

As @AEK mentioned, ideally you have both. As long as it remains accessible and provides service, a resource server is never too secure. Security of the endpoint is very important as well and must not be neglected. Whether it is FortiClient or another...

AlexC-FTNT · 04-25-2024

If you need a second answer to make it more clear, the answer is no! There is no connection between the VPN connections and the licensed security features. So the VPN will not be affected.

AlexC-FTNT · 04-25-2024

It's something that's likely botched. "set permit-any-host enable" or full cone NAT does not work (properly). Keep an eye on the release notes for the fix of 994784. It's still not fixed in 7.4 or earlier.

AlexC-FTNT · 04-22-2024

If you want to be strict about the DNS resolution, then set up the FortiGate DHCP to feed to the clients only the IPs of local DNS servers under "Specify" field (**or set up FG DNS server to local ones - both of them). The local DNS servers will retu...

AlexC-FTNT · 04-17-2024

Not very familiar with the DHCP setup, but check this article and see if there are any differences from your config:https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-setup-the-FortiGate-to-assign-IPv6/ta-p/194156

User Statistics

User Activity

Technical Tip: Change the order of route-map rules

Technical Tip: FortiGate and ZSTD implementation (for example Meta: Facebook, Whatsapp, Instagram blocked)

Technical Tip: Guest user password shows 'ENC XXX' after upgrade to v7.0.14, or v7.2.7

Technical Tip: Disable FortiAnalyzer on FortiGate, used by quarantine settings

Technical Tip: FortiOS Unsupported feature: 'Is it supported?'

Re: Firewall or Anti Virus.

Re: Question about Fortigate license

Re: Setting Up NAT64 to handle 64:ff9b:: requests

Re: resolving Internal DNS internally

Re: ipv6 - internal lan interface cannot reach internet

Technical Tip: FortiGate and ZSTD implementation (...

Technical Tip: FortiOS Unsupported feature: 'Is it...

Technical Tip: Hardware switch, Software switch, V...

Re: Firewall action Allow in policy 0?

Re: Cant find tdtype log field anywhere

Re: ipv6 - internal lan interface cannot reach int...

Re: combined ipv4 & ipv6 policy & nat

Re: Using proxy tunneling to activate FortiToken i...

Re: FortiWiFi firewall, router.wifi - dual radio

Re: UTM fail-over on FGSP

Fortinet Training Institute

KCS