Re: FortiNAC deployment

AEK · 04-29-2024

Hi FortiWeb adminsWhen I create a user group on FortiWeb 6.3.x from RADIUS I can't specify which RADIUS group. It means the group contains all RADIUS users.Is it a limitation of 6.3.x or did I miss something?

AEK · 04-28-2024

Hello FortiAuthenticator adminsI try configure my Cisco switch C3750 to send RADIUS requests to 1812 but it doesn't keep it, the config remains sending on port 1645, I don't know why, probably old firmware, and upgrade is not an option.Since this is ...

AEK · 04-28-2024

Hello FortiGate adminsOn FortiWeb appliance I can see all protected attack signatures with description and full details, but I can't find such list on FortiGate's WAF and anywhere on docs.fortinet.com.Anyone knows if it is documented somewhere?

AEK · 04-27-2024

Hi FortiGate adminsWhen enabling deep inspection for streaming media sites (like youtube), will it deep-inspect video stream as well? I mean inspecting gigabytes of videos (mp4 and so) is probably useless and it consumes much CPU for nothing.

AEK · 04-24-2024

Hi FortiGate adminsAny one used the "none" interface as SD-WAN member?I wonder if we can use it like a black hole, like when we don't want to route some traffic through any SD-WAN members when some SD-WAN members are down (not to fall in the implicit...

AEK · 04-29-2024

I'm not sure if it will help but try to do this:config system interface edit mgmt set dedicated-to management endAfter that it should work.

AEK · 04-29-2024

Hi @ovallejo Yes it works.Ref: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/e867c8f4-202f-11e9-b6f6-f8bc1258b856/FortiSwitch-Compatible-Transceivers.pdf

AEK · 04-29-2024

May be I missed something but a profile definition is not supposed to be under system or under protected domain. However it will be used by a policy, right?config profile antispam edit your-existing-antispam-profileSo what you mean exactly by under s...

AEK · 04-29-2024

If your 1st firewall policy is matching all the traffic that means your firewall policy has "ALL" as Service (destination port).You should change it to just the required service, i.e.: HTTPS or SMTP, etc

AEK · 04-29-2024

Hi @smalatif Usually that means the clients are not on the same broadcast domain as your firewall interface. That means the issue can be probably somewhere at L2 level, like the misconfiguration in trunk interface, a wrong VLAN id, a wrong VLAN confi...

User Statistics

User Activity

FortiWeb RADIUS group

Cisco switch and FortiAuthenticator RADIUS port 1645

WAF signatures

Deep inspection with streaming media

SD-WAN and none interface

Re: Management and internal

Re: FortiSwitch 124F with 1Gbps SFPs

Re: Fortimail - Edit bulk Banned Words list via Cli

Re: 2 VIP with same external IPs

Re: Users do not get VLANs DHCP IP on VLAN Switch on FortiGate

Re: FortiNAC deployment

Re: Fortinac Agent Not Active

Re: Inter VLAN routing

Re: Firewall or Anti Virus.

Re: FortiNAC - Profiling Static IP Devices

Re: How to configure the icons inPredefined Intern...

Re: Fortimail - Edit bulk Banned Words list via Cl...

Re: FortiSiem FSM-2000F the external collector

Re: Internal DNS Server issue

Re: Help setting up internet access for VLANS in h...