FortiProxy We have a customer that wants to use FortiProxy but has a
requirement that seems to be unsupported:1.) He must forward to an
upstream HTTP proxy for regulatory reasons.2.) He needs SSL deep
inspection on FortiProxy to apply UTM profiles an...
We are using a cluster of two 120G since February running the
special-built 7.0 fortios releases with various platform specific
annoyances (non-critical bugs).Any hint when this platform gets added to
the general release pool?
How to get AON single fiber (BiDi) FTTH/FTTx directly attached to a
FortiGate without using any provider CPE? We have a small office where
the internet connection is provided as "Gigabit Fibre DSL*!!1" with the
footnote "ADSL 500M down + 100M up over...
We have a Fortigate 100E running FortiOS 6.2.3 with two FSW 448D
switches.The switches are connected via four Gigabit ports each to the
Fortigate (no 10G interface in the 100E) using "set
fortilink-split-interface disable" to activate all 8 ports in ...
Hello,(FortiOS 5.6)the Hardware-Switch on FortiGate 61/81E seems to be
limited to the numbered ports (internal1 to internal7), the Ports
labeled WAN1, WAN2 and DMZ can only be used in a Software-Switch. I am
not concerned about performance (the few %...
Forward server and SSL deep inspection are mutually exclusive.When you
add forwarding server to a rule you must use a ssl profile that does not
have any deep-inspection options set.When you select a deep-inspection
SSL profile you cannot set a forwar...
chilimac02 wrote:Did you find a solution to this issue? I'm having a
similar issue myself. Even a link to another post would be helpful :) We
rebooted both fortiswitches and the fortigate during a maintenance
window and also upgraded the firmware.Thi...
emnoc wrote: You know that will not work out in the end , I believe
dot.com has like 100+ millon zone and that 1600 for TLD your quoted is
well over 5k. No, the point is we need an empty zone. This is the only
way to make a DNS server respond with NX...
The reason is actually pretty simple:1.) The fortigate is the only
device on site (apart from dumb layer 2 switches).2.) We need an
authoritative DNS server that MUST responds with NXDOMAIN negative
answers and not just timeouts or servfail errors (a...
