While we've been running FortiManager for years, we finally took the
time to setup it up to fully provision a firewall using Provisioning CLI
Templates. We built around 17 individual CLI Templates that configure
various sections of the config, and on...
Currently running FortiOS 7.2.11 and we're exposing a web server behind
a Virtual Server configured for SSL offloading. Our security team is
asking us to set the minimum protocol to TLS 1.2, but we've been asked
to make sure no legacy clients are sti...
We've been running FortiNAC for 2 years now and are starting to deploy
Intune joined workstations. I followed the 9.4.6 Intune integration
guide and it's successfully polling Intune and bringing in devices. The
issue we are now seeing is, we're a glo...
Does anyone have MS NLB configured with multicast working on Fortinet
gear in routed mode? We have an HA pair (active/passive) of 1801F
firewalls with a pair of 3032E switches attached via Fortilink. The
Microsoft services we are trying to configure ...
I had a strange issue escalated to me over the weekend. A site recently
migrated from MPLS to IPSec, and after a week, they started experiencing
a periodic outage with voice RTP. I setup a packet capture on both the
ingress and egress interfaces of b...
Hi Toshi, I did acknowledge the recommendation suggests two FortiLinks
verses one, but everyone's argument against it was specific to WAN links
over FortiLink managed switches, and to use standalone instead.
ChatGPT's entire argument revolved around ...
Update: Toshi called me out, indicating this solution does not satisfy
the OP since it uses two FortiLinks and requires extra switches, which
was what I was trying to avoid when I originally posted the OP 2 years
ago. Every argument against doing thi...
I greatly appreciate you researching this and was really hoping this
wouldn't be the case. Fortinet's argument that their approach helps
manage dependencies effectively is exactly what running the scripts in
order would achieve. We built the Template...
Unfortunately, this logs nothing. Here is the configuration, perhaps I
missed something? I didn't enable WAF or IPS yet, but those don't seem
relevant to the current issue at the moment. VIP setup config firewall
vipedit "mydomainname-vip"set type se...
