Technical Tip: Blocking connection to FortiManager...

_mribwan · 07-15-2024

Description This article describes that the Link monitor by default only removes the route from the routing table. The tunnel interface will still be up and tunnel failover will not occur. This article discusses using an automation stitch to disable ...

_mribwan · 05-19-2024

Description This article describes that in some instances, FortiManager has issues providing correct license info from FDS. This article describes the easiest way to block FortiGate from connecting to FortiManager for FDS updates and connect directly...

_mribwan · 04-03-2024

Description This article describes how to create DNAT/VIP from single external IP to multiple internal IP Scope FortiGate. Solution The key would be to configure optional filter on the DNAT/VIP for all related external IP. This would allow multiple i...

_mribwan · 09-04-2023

Description This article describes that the collectoragent.exe (FSSO) sends traffic to port 139 / 445 / 389 to the user IP (internal or external IP address). Scope FSSO, FortiGate, collecteragent.exe. Solution Refer to the following truncated pcap wh...

_mribwan · 02-14-2023

Description This article describes how to transfer an existing VLAN from one interface to another interface (existing or new). Scope FortiGate v7.2.x and v7.0.x. Solution Another alternative way for this method is to use the 'Integrate Interface' fea...

_mribwan · 04-03-2024

can you run this command and see if it import the token again?execute fortitoken-mobile import 0000-0000-0000-0000-0000if it doesnt, running the debug and assigning the token might give clue on what's happening : dia de cons times endia deb app forti...

_mribwan · 11-16-2023

Hi. Although this post is significantly old, I just would like to share my finding You may configure a dummy portal with tunnel mode and web-mode disabled, and assign All Other Users/Groups to this portalRef : https://docs.fortinet.com/document/forti...

User Statistics

User Activity

Technical Tip: Turn down/disable tunnel interface if the link monitor fails

Technical Tip: Blocking connection to FortiManager / Bypass FortiManager acting as FDS

Technical Tip : Creating DNAT/VIP to multiple internal ip from single external IP

Technical Tip: Collector agent sending traffic to port 139 / 445 / 389

Technical Tip: Transfer/Migrate VLAN to another interface (existing or new)

Re: error token in Fortigate

Re: Disable "All Other Users/Groups" in SSL VPN

Technical Tip: Blocking connection to FortiManager...

Re: error token in Fortigate

Re: Disable "All Other Users/Groups" in SSL VPN

KCS