Description This article describes that SSL VPN is not working when
FortiGate is on NGFW Policy-based. Scope FortiGate. Solution When
FortiGate is operating in NGFW policy-based mode, SSL VPN may not work,
although it is configured under SSL VPN sett...
Description This article describes how to prevent one or more IPv6
addresses from using the NAT64 firewall policy. Scope All versions of
FortiOS. Solution There are 2 options to prevent IPv6 addresses from
using NAT64 policies In the Virtual IP, spec...
Description This article describes how to use FortiSwitch to
authenticate users with 802.1x using FortiGate local database Scope
FortiSwitch. Solution There may be a situation where there is no
dedicated RADIUS server but it is still necessary to use...
Description This article describes how to enable Cisco Discovery
Protocol (CDP) on FortiSwitch. Scope FortiSwitch. Solution There may be
a situation where it is necessary for FortiSwitch and Cisco Switch to be
able to see each other via CDP. By defau...
Description This article describes how a FortiGate acts within a
different radius authentication methods. Scope FortiGate. Solution By
default, the FortiGate firewall uses a ‘default’ method of
authentication. It means the FortiGate tries to negotiat...
Hi @Martasss , I think for this you can use virtual server feature and
play with HTTP host header.. Check this if that helps:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setting-up-a-VIP-load-balance-with-HTTP-host-check/ta-p/198274
Abd...
Hi @piaakit1210 , I think you should check your network design because
no matter the HA mode only one device is the primary .. HA is just for
resource sharing. you cannot have servers only connected to slave and
not to primary. They must all connect ...
You should be able to connect to the secondary with mgmt port just make
sure you have the correct ip address and also a static IP on the same
subnet in the management PC Abdel
This is completely normal the cluster is Active-Active but there is
still a master which handle the traffic. Only the master will reply to
ARP request and the master will decide which traffic will be processed
by the secondary for resource sharing. A...