Re: Setting up FortiGate Web Authentication and SA...

Ade_23 · 11-27-2024

Description This article describes how to resolve the 'Domain not available' error when trying to create a FortiDDNS entry. Scope All FortiGate models (except model1000-series or higher or VMs). Solution When creating a FortiDDNS entry, it is possibl...

Ade_23 · 11-20-2024

Description This article describes why a WAN interface configured in DHCP mode will take precedence over a WAN link in static mode by default. Scope All FortiGate OS versions and models. Solution By default, the FortiGate prefers WAN interfaces in DH...

Ade_23 · 10-31-2024

Description This article describes how to use SAML outbound authentication for a user-based NAC policy to assign client devices to a VLAN on a FortiGate managing FortiSwitches. Scope FortiOS 6.4 and above. Solution There are existing articles and doc...

Ade_23 · 10-10-2024

Description This article describes how the GeoIP database is managed by Fortinet and the different ways it can be used by the FortiGate. Scope FortiOS 6.4 and above. Solution The FortiGate IP-Geolocation database shows/uses the physical location of a...

Ade_23 · 07-24-2024

Description This article describes why 169.254.0.65 and 169.254.0.66 cannot be used and respond to pings on FortiGates in an HA cluster when not in use in the network. Scope FortiGate in FGCP Cluster. Solution FortiGates in an HA cluster will prevent...

Ade_23 · 10-31-2024

Hello @heyyo, Here is an article on enabling the sdwan interface: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-and-disable-SD-WAN-options/ta-p/193768 Do you have any interfaces in that zone as asked by @Ricky?

Ade_23 · 10-17-2024

Hello julianhaines, First of all, you do not need a rule to allow traffic in for SAML authentication. Please run a saml debug on the FortiGate to see if you get any output.? Also, please enable captive portal with IP 0.0.0.0 under authentication sett...

Ade_23 · 08-30-2024

Hello @boneyard . The short answer is No. there is no way to see the number of hits for routing objects. The best way to see if they are working is by the effect of their application.

Ade_23 · 08-16-2024

Hello, You cannot use the same SSO instance for SSLVPN and outbound authentication on the same FortiGate. They would have to be two different instances.

Ade_23 · 08-07-2024

Set up an ip pool for that internal box using the wan interface IP and see if it works

User Statistics

User Activity

Troubleshooting Tip: How to resolve FortiDDNS 'Domain not available' error when switching between devices

Technical Tip: WAN interface in DHCP mode takes routing precedence over WAN interface with static configuration

Technical Tip: Setting up a user-based NAC policy using SAML outbound authentication (with Microsoft Entra ID)

Technical Tip: How the FortiGate Geo IP database is updated and maintained

Technical Tip: Explaining why IPs 169.254.0.65 or 169.254.0.66 cannot be used on FortiGates in an HA cluster

Re: SD-WAN Zone (virtual-wan-link) with Disabled Status

Re: Setting up FortiGate Web Authentication and SAML as idP

Re: Hit count for route map and other routing objects

Re: Entra ID for SSL VPN and Outbound traffic ports

Re: DMZ to LAN rule kills internet traffic on NAT'd host

Re: Setting up FortiGate Web Authentication and SA...

Re: Entra ID for SSL VPN and Outbound traffic port...

Troubleshooting Tip : Using other outbound authent...

Troubleshooting Tip: 'The mature Level of the curr...

Re: Setting up FortiGate Web Authentication and SA...

Re: Hit count for route map and other routing obje...

KCS