Technical Tip: How to block SSL VPN Connection fro...

darisandy · 02-01-2024

Description This article describes how to delete VDOM from CLI. Scope FortiGate. Solution There may be a scenario where it is impossible to access the FortiGate GUI and there is a requirement to delete the VDOM. But usually, it is not an easy task, b...

darisandy · 08-22-2023

Description This article describes the behavior modification of how FortiOS determines the SD-WAN member order when using the Lowest Cost (SLA) Algorithm. Scope FortiGate v6.4.10 and v 7.0.9 and later. Solution The scenario is as explained below: Spo...

darisandy · 03-01-2023

Description This article describes how to solve the IPSec negotiation issue between Fortigate and WatchGuard. Scope FortiGate, WatchGuard. Solution If FortiGate is behind the NAT device, it needs to be tweaked on IPSec setting if trying to connect wi...

darisandy · 02-27-2023

Description This article describe how to configure LDAP Setting on FortiProxy when integrating with Cisco UCS LDAP Server Scope FortiProxy v7.0.8. Solution Based on the article below, in some cases, it is required to strip a domain string from the UP...

darisandy · 12-04-2022

Description This article describe how to configure FortiAuthenticator as TACACS+ server for Cisco Wireless Controller (Cisco WLC) Scope FortiAuthenticator, Cisco WLC. Solution Refer to this document guide to configure TACACS+ on FortiAuthenticator: h...

darisandy · 12-07-2023

The numbers on datasheet was done on lab environment and those are only a benchmark of what the hardware could possibly handle. But I believe only Fortigate product team know exactly how the test was done. For any capacity planning enquiries, I would...

darisandy · 12-07-2023

you can create VLAN interface (tagged interface) under that one physical interface https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-a-VLAN-tagged-interface-802-1q-on-a/ta-p/193893 after that you can specify the default route,wh...

darisandy · 12-07-2023

few articles you can read up about it : https://community.fortinet.com/t5/Support-Forum/why-do-we-assign-secondary-IP-address/m-p/219857 https://community.fortinet.com/t5/FortiGate/Technical-Tip-Set-a-secondary-IP-on-a-FortiGate-interface/ta-p/226046

darisandy · 12-03-2023

Based on the available command you shared, I don't think it's possible. Once the ports are member of LACP interface, most likely that older version can't refer to the physical port anymore.

darisandy · 12-03-2023

It's a bit tricky to set management access on FGT Transparent Mode. You may want to check docs send by Minh for more detailed deployment. Usually when you have multiple VLAN going through FGT, you need to define forward domain. So the traffic will no...

User Statistics

User Activity

Technical Tip: How to delete FortiGate VDOM from CLI

Technical Tip : Behaviour Change of SD-WAN Member Order using Lowest Cost (SLA) Algorithm

Technical Tip: IPSec tunnel between FortiGate and WatchGuard, error 'Received ID did not match the configured remote gateway endpoint'

Technical Tip: NTLM Authentication with Cisco UCS LDAP Server

Technical Tip : TACACS+ Configuration for FortiAuthenticator and Cisco WLC

Re: FG-60F Performance Questions

Re: Two ISPs different VLAN

Re: Fortigate Interface settings

Re: problem with HA monitored interface configuration for LACP interface

Re: About management IP settings in transparent mode

Technical Tip: How to block SSL VPN Connection fro...

Re: Remote RADIUS Server on a VPN

Technical Tip : Behaviour Change of SD-WAN Member ...

Re: FG-60F Performance Questions

Re: problem with HA monitored interface configurat...

Re: Source Nat with destination port

Re: Integration of Fortigate with Zabbix

KCS