Technical tip: DNS over TLS using Cloudflare DNS

larsbollas · 10-28-2024

Description This article describes how to enable Email alerts whenever an anomaly is detected. Scope FortiGate v7.2. Solution Make sure a DOS policy is in place and logging is enabled.Refer to this article: Technical Tip: How to configure IPv4 DOS po...

larsbollas · 10-28-2024

Description This article describes how to restore the admin account if the default admin account gets deleted. Scope FortiGate. Solution Backup the current FortiGate configuration: Open the configuration file in Notepad++ and search for "config syste...

larsbollas · 09-22-2024

Description This article describes how to block internet access for single or multiple hosts using the IPv4 deny policy. Scope FortiGate. Solution Go to Policy & Objects -> Addresses and select Create New Address: An address called '192.168.1.55/32' ...

larsbollas · 08-13-2024

Description This article explains the workaround to process if the DHCP is enabled on both FortiGates in the VRRP cluster. Scope FortiGate. Solution When FortiGate is on a VRRP cluster with another FortiGate (or other device that supports VRRP) it me...

larsbollas · 09-05-2022

Description This article describes how to configure FortiGate DNS over TLS using Cloudflare DNS. Cloudflare DNS: Primary DNS 1.1.1.2 Secondary DNS 1.0.0.1 Scope From GUI: From CLI:# config system dns set primary 1.1.1.2 set secondary 1.0.0.1 set prot...

larsbollas · 08-10-2022

Hi Firasbg, Make sure there is IPv4 policy to allow internet access from your network. Check policy&object>Firewall policy.

larsbollas · 07-22-2022

Hi Firasbg,Can you verify if SSH is open in your server. From the Fortigate CLI:# exe telnet 192.168.37.2 22

larsbollas · 07-21-2022

Hi Xenitel,I think you can create a script to import the IP addresses to your fortigate. You can try this:config firewall addressedit "X" <-- nameset subnet x.x.x.x x.x.x.x <- enter the ip address or subnetnext edit "y"set subnet y.y.y.y y.y.y.y next...

larsbollas · 07-21-2022

Hi Firasbg,Traffic flow is like:->->->Try to configure VIP in the fortigate to forward SSH traffic from outside to internal VM.KB:https://community.fortinet.com/t5/FortiGate/Technical-Tip-Virtual-IP-VIP-port-forwarding-configuration/ta-p/198143

larsbollas · 07-21-2022

t_krawaczynski,It should be in the GUI:Policy&objects>Internet Service Database> Create NewKB:https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-internet-service-database-based-on/ta-p/194297

User Statistics

User Activity

Technical Tip: Email notification when an anomaly is detected

Technical Tip: How to restore the default admin account

Technical Tip: Blocking host internet access

Technical Tip: FortiGate VRRP cluster with DHCP enabled

Technical tip: DNS over TLS using Cloudflare DNS

Re: Access to the fortigate interface and kibana interface of elk server without internet?

Re: how to access from outside (my host ) with putty to internal VM ubuntu server of fortigate VM

Re: Whitelisting IPs

Re: how to access from outside (my host ) with putty to internal VM ubuntu server of fortigate VM

Re: Internet block but not all

Technical tip: DNS over TLS using Cloudflare DNS

Technical Tip: How to restore the default admin ac...

Re: Access to the fortigate interface and kibana i...

Re: how to access from outside (my host ) with put...

Re: how to access from outside (my host ) with put...

Re: how to access from outside (my host ) with put...

Re: Internet block but not all

KCS