Good day,With your help I was able to solve a previous issue with BGP
AWS IPSEC. Now, more than an issue, it may sound more like a workaround,
here is the scenario. I have both AWS DirectConnect (DXC) and AWS IPSEC
VPNs, as some may know, using BGP w...
Good day. Simple issue: I want to use SDN connectors with an onpremise
FW (physical, not cloud). But for PCI compliance, I need to rotate the
access keys periodically. Has anyone encounter a situation to make an
automation between the cloud and the f...
This is a follow up from:
https://community.fortinet.com/t5/Support-Forum/AWS-IPSEC-on-BGP-routing-how-to-control-traffic-preference-for/td-p/279609
And now my issue is that I have connected the BGP with the VPCs but the
routes in between are not bei...
Good day guys.I have the following setup.200F with dual WAN4 tunnels to
AWS (the usual IPSEC with 2 tunnels).Probably, next year, hopefully, I
will have AWS Direct Connect.Let´s begin with the IPSEC tunnels
first:I´m having issues with the ECMP on th...
Regarding this technical note:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-send-automated-backups-of-the-configuration/ta-p/198364
Specifically this section: When the FTP server is known through an IPSec
VPN. I´m having an issue ...
Hi do you know where can I find examples for the Fortinet API? I got the
Fortinet Lambda covered, but cannot find usefull info for the Fortinet
API. Thank you.
But @Toshi_Esumi does the solution you gave applies to Fortigate to
Fortigate situations only? Because this situation is Fortigate to AWS
VPN (no Fortigate VM, pure AWS). It works now. The whole issue can be
seen on the diagram, all the neighbours ha...
Hi @slovepreet I did that, I assumed that I filtered wrong, but then I
tested using an empty prefix list set to permit any, and still, only
routes on "Networks" were seen, plus a bunch of other stuff. But
specifically, not the routes learned from the...
Let´s use graphs again,The problem: And what I think could be the
solution, using a second vdom:Is this a valid solution? poiting all the
VIP to a virtual server in another vdom in the same firewall?
Good day all.I know, it´s been a while. But something came up to my
mind.EDIT:Can the FW do the following while having multiple vdoms? In
vdom mode; "technically"; I could point all the VIPs to a LB in another
vdom; right?; and I could do this withou...
