Hi,Customer has purchased some FortiAPs, to be managed by FortiGate.They
want to authenticate staff onto an SSID if they present a particular
machine certificate (signed by their CA), just like you can do with SSL
VPN.I've tried configuring it but it...
Hi, I'm working with a customer who need to source NAT all traffic
coming in on one interface and going out of another, but they only want
to translate the 2nd Octet. For example:Real Source IPNATed Source
IP172.16.18.23172.20.18.23172.16.63.115172.2...
Hi, I have a project to implement SD-WAN for a client so I'm labbing it
with FMG on 7.2.4 and FTGs on 7.2.6. I can get everything working but
there is an oddity... When configuring the SDWAN overlay template, the
third page of the wizard asks for the...
Hello,I'm working with a client who have recently migrated to Fortigate
firewalls running 7.0.13 and using FSSO (agent based) for rules to be
based on AD group membership.On the whole this is working fine apart
from users who connect via a docking st...
Hello! I can't find info regarding the resource requirement (CPU,
Memory, Disk) for the FSSO DC Agents and Collector Agents. Can anyone
point me in the direction of a document that details this information
please? I know it's... "not much" but I'm wo...
Hi @dbu and thank you for your quick response,I guess it depends how the
NAT pool operates? Will it do what I illustrated in my original post
(only change the 2nd octet) or will it start at the bottom of the pool
and work up like below? So assuming t...
Hello,I also have a requirement to match on a substring of the
certificate subject field.For example, let's say I have a certificate
with "CN = matt.mycompany.com" in the subject.If I set this as the
subject to be matched under the PKI user it works ...
It changes it to 0.0.0.0 (same as setting to null effectively)It's worth
pointing out that I am using the SDWAN template that the SDWAN overlay
template creates when working through the wizard, so it automatically
creates zones for WAN1, WAN2, HUB1 a...
