Description This article explains the difference between
'srcintf-filter' and 'extintf' in the VIP settings. Scope FortiOS,
FortiProxy. Solution 'srcintf-filter' and 'extintf' definitions in the
VIP settings often bring confusion. 'extintf' is intend...
Description This article describes how to configure web mode SSL VPN to
follow the SD WAN rules when it comes to the selection of the proper
egress interface in order to reach the destination. Scope FortiGate.
Solution Starting from FortiOS 6.2.6 and...
Description This article describes that the application control detects
the application type, but does not block it if the FQDN is in the exempt
list of the deep inspection profile. Scope FortiOS. Solution If an FQDN
(for example sls.update.microsoft...
Description This article describes the configuration steps necessary to
apply FSSO rules to SSL VPN users. Scope FortiOS 7.0 and newer versions.
Solution FSSO rules can be used for the traffic generated by remote
access VPN users. In order to have a <!-- --><!-- -->...
Description This article covers the configuration of two DNS servers
along with the captive portal on two different interfaces of FortiGate.
Scope FortiOS 7.0.6 and newer versions. Solution On FortiOS versions
prior to 7.0.6, it was possible to confi...
Hi, "my plan was for the FG to have a single gateway IP" IMHO it goes
against multilink SDWAN concept, as with the SDWAN, you have several
different ISP uplinks that are being logically grouped in order to
perform the traffic routing/balancing across...
Hi Jim, SNAT cannot be applied to the self-originated traffic within one
vdom.If you specifically need to implement the design, i could recommend
you to create two vdoms, let`s say ipsec and root. root and ipsec vdoms
will connect via an intervdom li...
Hi,Correct, SPAN port can be configured as a part of a switch interface.
Switch interface as any other one can be used as a WAN interface, but
you will have to redo the entire configuration and probably the design
of the connections. Regards,
Following up, it is possible.Here is the KB article for
that:https://community.fortinet.com/t5/FortiGate/Technical-TIp-Configure-Fortinet-Single-Sign-On-FSSO-for-SSLVPN/ta-p/229274
Good day Yurisk,When it comes to the Admin Guides and etc., please
follow up with the Grahams suggestion.When it comes to that specific KB
article, I believe there is a typo and I have submitted the correction.
Thank you for pointing out this. Ahmad