Troubleshooting Tip: VIP DNAT internal server not ...

mauromarme · 01-29-2024

Description This article describes which technique can be used to prioritize traffic as stated in the example below: 100MB Bandwidth Available on the WAN Interface. There are 2 User Types: Agents and Management. The main goal is to prioritize the Man...

mauromarme · 11-30-2023

Description This article describes the expected behavior when MAC Address objects are used on SD-WAN rules. Scope FortiOS 7.2.x. Solution Occasionally, there is a need to utilize MAC Address objects as sources or destinations in SD-WAN Rules. These o...

mauromarme · 11-27-2023

Description This article describes how to resolve cases where traffic is correctly forwarded by the FortiGate but encounters issues such as non-functional traffic or no response from the destination host to the source host. Scope FortiGate v7.2.x. So...

mauromarme · 10-05-2023

Description This article describes instructions on setting up the FortiGate to direct internal users to an External Captive Portal, ensuring authentication before granting network access. In this scenario, the Captive Portal Server is situated behind...

mauromarme · 02-01-2024

I Agree.MAB should fix this, as the Phones can authenticate, but in the meantime using a guest VLAN would be a good workaround.

mauromarme · 01-31-2024

Hello @JDLiver Just to make sure, the issue is that Port-Based 801.1X Authentication is only working for phones when they are connected to the Dock station?Have you verified the phones support the configuration you have?Have you verified if there is ...

mauromarme · 01-31-2024

Hello @Rifqi, I think this could be related to a NLB AWS behavior. If you see the Private IP from NLB as the source, it is because that's how NLB forwards traffic to the FortiGate. If NLB were to include the "Real" public IP in the header instead of ...

mauromarme · 01-31-2024

Hello @kanes39, FSSO is effective for Windows Logon Events. However, for VPN Logon Events, our attention should be directed to logon events on the authentication server utilized for VPN Users, in your case Azure SAML Authentication. To set this up wi...

mauromarme · 11-30-2023

Hello @Phill1 The traffic could be blocked by FortiGate because there is no Firewall Policy or because there is a Missconfiguration on a Firewall Policy.Please, execute the commands below, they may help you to determine whats happening:diag debug res...

User Statistics

User Activity

Technical Tip: Using Traffic Shaping with Class ID to Prioritize Traffic

Technical Tip: SD-WAN Rules with MAC Address Objects

Troubleshooting Tip: VIP DNAT internal server not responding

Technical Tip: Captive Portal External Authentication in a Hairpining network

Re: Port-Based 802.1x Security Policy and IP Phone Problem

Re: Port-Based 802.1x Security Policy and IP Phone Problem

Re: view real source ip in fortigate aws

Re: FSSO for VPN Users Authenticate via Azure SAML

Re: Website not ping/trace/accessible

Troubleshooting Tip: VIP DNAT internal server not ...

Technical Tip: Using Traffic Shaping with Class ID...

Technical Tip: SD-WAN Rules with MAC Address Objec...

Re: Fortigate FortiVPN

Technical Tip: Captive Portal External Authenticat...

Re: One-Armed Sniffer and HA

KCS