About Chandra_FTNT

Chandra_FTNT · 10-01-2020

DescriptionThere is internally hosted web site which users need to resolve to local IP when tried to access the IP so FortiGate needs to have a static DNS entry with DNS server database and Users have to get DHCP IP from DHCP server which is again Fo...

Chandra_FTNT · 06-22-2017

DescriptionThis article shows how to redirect updates such as signature updates and license syncs to a different WAN interface using the web-proxy feature on the FortiGate.Requirement: Two WAN interfaces are configured on the FortiGate but license sy...

Chandra_FTNT · 10-21-2014

DescriptionUser based authentication required on FSSO, so different users get different profiles through policy. Need to integrate FortiGate with LDAP, install FSSO agent (with DC Agent) on the server with advanced mode and set user filter from Forti...

Chandra_FTNT · 08-19-2022

Hi, Please verify if the net-device is enabled on the IPsec tunnel, there is behavior change in the firmware, please check below KB: https://community.fortinet.com/t5/FortiGate/Technical-Tip-set-net-device-new-route-based-IPsec-logic/ta-p/193618?exte...

Chandra_FTNT · 06-02-2022

Hi, When you are creating VIP for port forwarding, if you enable Port Forwarding you must provide port from external and the port used internal. As your web server using custom port Web server: 10.10.1.1:8081 You must use external also with port numb...

Chandra_FTNT · 05-17-2022

Hi Anthony, Please refer below KB to use two factor for PKI users:https://community.fortinet.com/t5/FortiGate/Technical-Tip-PKI-user-with-two-factor-authentication-for-SSL/ta-p/190956 Which firmware are you running? Regards,Chandra

User Statistics

User Activity

Technical Tip: Adding static DNS entry on FortiGate with DHCP assignment

Technical Note: Redirecting signature updates

Technical Note: User based authentication on FSSO, using LDAP and FSSO agent on advanced mode

Re: IPSec VPN error "Dropped by template device"

Re: VIP port forwarding

Re: VPN with certificate authentification and Fortitoken

Fortinet Training Institute

KCS