Fortinet Community

martinsd · 09-26-2023

Description This article describes the behavior and limitations of using geographic address objects on ZTNA Rules/Proxy policies. Scope FortiOS 7.0.x and 7.2.x Solution Geographic address objects are not supported by ZTNA Rules/Proxy policies and the...

martinsd · 07-12-2023

Description This article describes how to emulate a WAN link with a Linux machine. Scope Everyone that wants to simulate a WAN link in the lab to test their network resiliency. Solution Lab Setup: IPv4 WAN Emulator: Ubuntu 20.04 distro was chosen to ...

martinsd · 07-12-2023

Description This article describes the case when the Windows Firewall is not switching to Domain after a VPN connection, blocking traffic. Scope FortiClient. Solution There is a lag for the FortiClient to install routes on the endpoint routing table....

martinsd · 07-05-2023

Description This article describes the reason for a group mismatch issue that may occur in FortiGate even if a correct group claim is correctly configured in the Enterprise Application in Microsoft Azure, and a successful sign-in is performed in Azur...

martinsd · 07-03-2023

Description This article describes an important caveat with a setup involving a FortiGate and FortiClient EMS Connector on a Multi-VDOM with a VDOM Partitioning environment. Scope FortiGate FortiOS 7.4.0 or below. Solution In order to use TAGs for ZT...

martinsd · 06-06-2023

@RolandBaumgaertner72, I will need your routing table (get router info routing-table all), I will need to check your IPSec Phase 2 selectors, and your IPSec interface config. You can send by PM if you do not want to expose your config.

martinsd · 06-05-2023

Hey, @RolandBaumgaertner72, can you please add "4 0 l" to the packet capture commands, and provide the output? Can you please provide the output of the relevant "diag flow" command (https://docs.fortinet.com/document/fortigate/6.2.14/cookbook/54688/d...

martinsd · 05-18-2023

Hey Danny, I find myself using this almost everyday, even in v7.4.0. Thank you very much for sharing your script. Regards,

Fortinet Community

User Statistics

User Activity

Technical Tip: Use of geographic address objects on ZTNA Rules/Proxy policies

Technical Tip: Emulate a WAN connection using a Linux machine

Technical Tip: VPN - Windows Firewall not switching to Domain after a VPN connection

Technical Tip: Understanding the limitation of 150 assertions from Microsoft Azure as SAML IdP that may cause group mismatch in FortiGate

Technical Tip: Important info about a FortiGate and FortiClient EMS Connector on a Multi-VDOM with a VDOM Partitioning environment

Re: Routing Problem with incomming SSL VPN connection to other VPN

Re: Routing Problem with incomming SSL VPN connection to other VPN

Re: FortiGate WebUI Tools > ARP info

Technical Tip: How to use the 'proxy-arp' feature ...

Technical Tip: Emulate a WAN connection using a Li...

Technical Tip: VPN - Windows Firewall not switchin...

Technical Tip: Microsoft Exchange, Office365, Team...

Technical Tip: Create an Internal Segmentation Fir...

KCS