Technical Tip: Free up memory to avoid conserve mo...

xshkurti · 05-27-2025

Description This article describes the CrazyRemote Application signature issue on Policy-Based NGFW. Scope FortiOS v7.2, FortiOS v7.4, FortiOS v7.6. Solution FortiGate Firewall, configured in policy mode, gives the option to add application signature...

xshkurti · 05-27-2025

Description This article describes how FortiGate, configured in Policy-Mode, behaves when downloading the EICAR file. Scope FortiOS Policy-Mode. Solution FortiGate FortiOS operates in 2 different modes: Profile-Mode and Policy-Mode. Profile mode is t...

xshkurti · 03-28-2025

Description This article describes how to configure S2S IPsec VPN between FortiGate device and Opnsense appliance. Scope FortiOS. Solution The lab environment consists of 1 FortiGate and 1 Opnsense device, both installed as virtual appliances on top ...

xshkurti · 02-25-2025

Description This article describes how to install FortiClient in Ubuntu Noble 24.04. Scope FortiClient v.7.4.0 Solution FortiClient is an all-in-one comprehensive endpoint security solution that extends the power of Fortinet’s Advanced Threat Protect...

xshkurti · 01-29-2025

Description This article describes how to get hit count for Explicit Proxy policies through CLI. Scope FortiGate. Solution Firewall policy and explicit proxy policy operate on different levels. The same applies to statistics and how to read them.A ve...

xshkurti · 05-31-2025

Using LAG on port1 and port1 as members, means that for example if port1 is 1GB and port2 is 1GB, when lacp configured, you will have a "virtual link" made of 2 members that will have a speed of 2GB.The other end needs also to have LACP configured an...

xshkurti · 05-31-2025

Routing is primarily Device-Level, not Policy/Object LevelWhile Prefix Lists and Route Maps are objects, and dynamic routing protocols (BGP) are configurations, FortiManager typically manages them as device-level configurations or via provisioning te...

xshkurti · 05-31-2025

FortiGate lacp-mode static means:No LACP negotiation:The FortiGate doesn't send or receive LACP control packets to negotiate the LAG. All ports active:All ports within the LAG are always active and participate in traffic transmission. Used when LACP ...

xshkurti · 05-31-2025

According to this doc you shouldnt have multiple sdwan zones (one per interface), but the design should be to have 1 zone per underlay and 1 zone per overlay. Example SD-WAN configurations using ADVPN 2.0 | FortiGate / FortiOS 7.6.2 | Fortinet Docume...

xshkurti · 05-31-2025

You can check this link:Exam Policy - Recertification : Help Desk It gives a full overview of how renewal works. You should first check your profile on how your NSE7 is converted to FCSS or FCP and from there consult with the above link.

User Statistics

User Activity

Technical Tip: CrazyRemote application signature removed after upgrading from v7.2 to v7.4

Technical Tip: NGFW in policy mode and EICAR file

Technical Tip: How to configure IPsec Site-to-Site VPN between FortiGate and Opnsense

Technical Tip: How to install latest FortiClient software on the Ubuntu 24.04

Technical Tip: FortiGate Explicit proxy per policy hit count

Re: What's the difference between Fortigate's lacp-mode static and H/W & S/W switch?

Re: Import configuration into Forti Manger, Routing objects and BGP

Re: What's the difference between Fortigate's lacp-mode static and H/W & S/W switch?

Re: SDWAN - BGP behavior

Re: Recertification -- NSE7

Technical Tip: Free up memory to avoid conserve mo...

Technical Tip: Install FortiGate-VM on Hyper-V and...

Technical Tip: FortiGate Site-to-Site VPN with Str...

Technical Tip: How to install latest FortiClient s...

Technical Tip: How to view/log actual client IP on...

Re: What's the difference between Fortigate's lacp...

Re: What's the difference between Fortigate's lacp...

Re: Question about FortiClient VPN SSL and CVE-202...

Re: How are the two processors (CP and NP） divided...

Re: Is there anyway to disable / enable specific T...

KCS

User Statistics

User Activity

You are leaving our website