Seeking a Fortinet solution to replace our Umbrella DNS Advantage for
remote users. The goal is to enforce DNS filtering for all remote users,
regardless of whether or not they are on/off VPN. Forticlient doesn't
support the DNS filtering profile (on...
For my FortiCloud subscriptions (FAZ, FMG, Sandbox, EMS) - Our
compliance team needs documentation that our data is kept in US
datacenters only. How is this handled and is there any documentation
that proves it ? Thanks, Don
When trying to move sub-interfaces from one physical port to another, my
policy package in FMG throws errors... Seems like I have to manually
update every policy. Is there a way to get the policy to track the
changes and auto-correct itself ? Thanks,...
Let's say my environment consists of 1 spoke and two hubs. All sites
have at least 1 ISP. There is an MPLS link between each spoke and the
hub, no MPLS between spokes.Spokes will route through the Hub via MPLS
via OSPF to reach each other.If an MPLS ...
When migrating from a non-DPI environment to DPI, what is some of the
considerations that need to be addressed prior to cutover? I understand
that there will always be one-off gotchas that will need to be fixed on
the fly.Here are a few things that I...
My thought was running these CLI scripts from FMG: 1) Policy Package -
Replace vlan interface with "any". Must install the policy because all
subsequent configs will fail.2) Device Database - In the VLAN interface,
unset the existing physical port, t...
