Fortinet Community

Atul_S · 05-12-2022

Description This article describes the method to create and implement a security profile group inside the policy. Scope FortiGate. Solution Depending upon the mode of operation of the firewall whether it is operating on Profile-based NGFW which is al...

Atul_S · 05-11-2022

Description This article describes methods to choose SIP-ALG and Session Helper. Scope SIP ALG/Session Helper. Solution By default, FortiGate is using SIP ALG to process SIP traffic however some SIP providers recommend disabling SIP ALG in the firewa...

Atul_S · 05-11-2022

Description This article describes the additional steps required to replace the AS-PATH for any received BGP prefix for redistribution to another BGP peer. As a general practice, BGP provides the capability of using AS-OVERRIDE in situations where th...

Atul_S · 05-10-2022

Description This article describes the situation where there is a need to delete MGCP and H323 protocols under session helper. Scope SIP is the most widely used signaling protocol when it comes to VOIP traffic, however there are a few other protocols...

Atul_S · 05-10-2022

Description This article describes the situation where there is a need to customize the DSCP configuration at FortiGate. Scope Solution Many times there is a situation where the IPSEC tunnel is stable and routing/policy is also correctly configured b...

Atul_S · 06-14-2022

Hello, If you do not want to use any external VPN client, you can try to use the inbuilt VPN with MS windows. Please refer to the below link and see if this helps you. https://docs.fortinet.com/document/fortigate/6.0.0/handbook/232068/pptp-and-l2tp h...

Atul_S · 05-10-2022

Hello, As a best practice to use Explicit proxy, one should set the explicit web proxy and explicit FTP proxy Default Firewall Policy Action to Deny. This means that a firewall policy is required to use these explicit proxies, allowing to control acc...

Atul_S · 05-10-2022

FortiGate Differentiated Services feature can be used to change the DSCP (Differentiated Services Code Point) value for all packets accepted by a policy. The network can use these DSCP values to classify, mark, shape, and police traffic, and perform ...

Atul_S · 05-10-2022

Hello, SSL inspection feature comes by default and there is no separate license to activate SSL inspection. However, if somebody wants to do an SSL inspection for any data traffic but does not have any UTM profiles(license required) attached to that ...

Atul_S · 05-09-2022

Hello, Not sure of the resolved issue section of the release note as to why it is not mentioned there but Yes, this issue is confirmed resolved in FortiOS 6.4.9. Thanks Atul

Fortinet Community

User Statistics

User Activity

Technical Tip: How to use Security Profile Groups

Technical Tip: How SIP-ALG and Session helper works in FortiGate

Technical Tip: Replace as path chain in BGP advertisement

Technical Tip : No audio with Panasonic phones with FortiGate

Technical Tip : Issue with traffic flow across IPSEC or Policy routing

Re: Remote Access Secure Solution

Re: Doubts about benefits os proxy web witouth deep inspection.

Re: VPN ipsec DSCP trust

Re: SSL Inspection feature and the type of licensing model.

Re: Is CVE-2022-0778 resolved in fortios 6.4.9?

Re: Doubts about benefits os proxy web witouth dee...