Re: LACP between Cisco and Fortiswitch (MC-LAG) ST...

anignan · 12-04-2023

Description This article describes that SSL VPN is not working when FortiGate is on NGFW Policy-based. Scope FortiGate. Solution When FortiGate is operating in NGFW policy-based mode, SSL VPN may not work, although it is configured under SSL VPN sett...

anignan · 11-20-2023

Description This article describes how to prevent one or more IPv6 addresses from using the NAT64 firewall policy. Scope All versions of FortiOS. Solution There are 2 options to prevent IPv6 addresses from using NAT64 policies In the Virtual IP, spec...

anignan · 09-21-2023

Description This article describes how to use FortiSwitch to authenticate users with 802.1x using FortiGate local database Scope FortiSwitch. Solution There may be a situation where there is no dedicated RADIUS server but it is still necessary to use...

anignan · 09-20-2023

Description This article describes how to enable Cisco Discovery Protocol (CDP) on FortiSwitch. Scope FortiSwitch. Solution There may be a situation where it is necessary for FortiSwitch and Cisco Switch to be able to see each other via CDP. By defau...

anignan · 09-07-2023

Description This article describes how a FortiGate acts within a different radius authentication methods. Scope FortiGate. Solution By default, the FortiGate firewall uses a ‘default’ method of authentication. It means the FortiGate tries to negotiat...

anignan · 04-24-2024

Hi @Martasss , I think for this you can use virtual server feature and play with HTTP host header.. Check this if that helps: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setting-up-a-VIP-load-balance-with-HTTP-host-check/ta-p/198274 Abd...

anignan · 04-24-2024

Hi Ganesh, Did you try set the power level to auto? Are APs closed to each other? Abdel

anignan · 12-15-2023

Hi @piaakit1210 , I think you should check your network design because no matter the HA mode only one device is the primary .. HA is just for resource sharing. you cannot have servers only connected to slave and not to primary. They must all connect ...

anignan · 12-15-2023

You should be able to connect to the secondary with mgmt port just make sure you have the correct ip address and also a static IP on the same subnet in the management PC Abdel

anignan · 12-15-2023

This is completely normal the cluster is Active-Active but there is still a master which handle the traffic. Only the master will reply to ARP request and the master will decide which traffic will be processed by the secondary for resource sharing. A...

User Statistics

User Activity

Technical Tip: SSL VPN is not working when FortiGate is on NGFW Policy-based

Technical Tip: How to prevent IPv6 addresses from using NAT64

Technical Tip: How to use FortiSwitch to authenticate users with 802.1x using FortiGate local database

Technical Tip: Enabling CDP on FortiSwitch

Technical Tip: Explanation of authentication methods of a radius server setting on a Fortigate firewall

Re: Two different websites (domains) on two different internall IIS servers on same port 443

Re: Can we use DFS channel in fortiap

Re: HA Active Active the secondary devices stop to have network connectivity

Re: HA Active Active the secondary devices stop to have network connectivity

Re: HA Active Active the secondary devices stop to have network connectivity

Re: LACP between Cisco and Fortiswitch (MC-LAG) ST...

Re: LACP between Cisco and Fortiswitch (MC-LAG) ST...

Re: fortigate can work with layer 7 ( layer applic...

Re: fortigate can work with layer 7 ( layer applic...

Re: IPsec VPN with DDNS from both sides

Re: HA Active Active the secondary devices stop to...

Re: Give fsso users internet

Re: Control wan to lan traffics

Re: SSID Captive Portal Timeout

Re: fortigate can work with layer 7 ( layer applic...

KCS