Hi, I have a problem with FortiOS and ansible.I am not able to connect
with ansible to FortiOS via SSH.I don't have any problems with httpapi,
but it's not that simple to enter just "regular commands"... e.g.
"execute ping x.x.x.x" or "get system sta...
Hi, I have a problem with firmware upgrades of a FGT-Cluster.A part of
the configuration gets lost after upgrading the firmware of the
cluster.I don't even know the steps/update path of the last time.But
this time the upgrade was from 7.2.3 to 7.2.4....
Hi, I have an issue with use of VRFs.I configured the FGT like descriped
in the following instruction:
https://docs.fortinet.com/document/fortigate/7.2.3/administration-guide/752950
The FGT has two IPsec tunnels, one for primary and one as backup.All...
Hi community, I have a problem regarding authentication via TACACS+ on
FGT units (FGT40F).I have two WAN interfaces, but their're no members of
a SD-WAN. If the primary interface goes down, the login via TACACS+ is
not possible anymore.Also I configu...
Hi, don't have the exact same scenario... I don't use a LDAP-Server for
that.All users are configured as local users and MFA via mail works
fine. Can you try your setup with a local user instead of a LDAP user?I
know that it doesn't solve your curren...
Hi, as @dbu wrote use two-factor-authentication...Good to know: You do
not need to buy any FortiTokens, if you use method via mail.But you can
only set this via CLI:config user localedit set two-factor
emailset email-to Of cource you need a SMTP ser...
You can not enter the command "show config webfilter urlfilter".Either
"show webfilter urlfilter" or "config webfilter urlfilter"... the manual
seems correct to me.I mean someone forgot the "config webfilter
urlfilter" command to get in the section.....
You can start a packet capture on the FGT (Network > Diagnostics >
choose interface and set filter).And filter the source IP addresses
(addresses of IoT devices).After a while you should be able to see (use
Wireshark!) what these devices are trying t...
Good aspect - I also corrected my post...But I guess he wants that FGTA
is usually the primary one... and I prefer the priority statement.
Additionally I didn't recognize the failovers while working because it
smoothly worked.
