Re: link between public domain and local server

hhasny · 04-29-2024

Description This article describes the behavior of SNAT when VIP is configured (no port forwarding). Scope FortiGate. Solution There are two options for FortiGate to perform SNAT configurable in the firewall policy. Use Outgoing Interface Address. Us...

hhasny · 03-25-2024

Description This article describes why FSSO user do not match firewall policy even though the connector is UP. Here you can see 50+ Users/groups have been populated and used in the firewall policy. FSSO CA Connector Status Below is the firewall polic...

hhasny · 12-03-2023

Description This article discusses the scenario when users do not match the firewall policy that has active authentication. Scope Active authentication means that users are prompted to manually enter their credentials before being granted access. Whe...

hhasny · 05-28-2023

Description This article describes the need to enable deep-inspection to see the bytes received in the web filter traffic logs. Scope FortiProxy web filter log. Solution To see the bytes received for the web filter traffic logs, it will be necessary ...

hhasny · 05-28-2023

Description This article describes why FortiGate is forwarding DNS queries for blocking or banning domains to the DNS servers. Scope FortiGate DNS. Solution There are instances that the FortiGate is sending DNS queries to the configured DNS servers f...

hhasny · 03-09-2024

Hi @MeoDub , If you looking for UDP/4500 for IPSec it would be IKE service. The IKE service includes UDP/500 UDP/4500. How exactly the connection would be? Is the traffic initiated from internal to external? regards,

hhasny · 03-04-2024

Hi @networm , I believe mac address base policy is what you are looking for. Try checking the following link guide. http://docs.fortinet.com/document/fortigate/7.2.7/administration-guide/407159 best regards,

hhasny · 03-04-2024

Hi Ahmad, So you are hosting a webserver behind the Fortigate? You need to make sure if the domain/url is resolvable to an IP. On the Fortigate create VIP to map it out. Check the following KB for the VIP config portion. https://community.fortinet.co...

hhasny · 01-08-2024

Hi @rayha , Could you take a look at this KB article of step 3 and step 4? Here we can make sure packet is hitting the Fortigate and if Fortigate is forwarding it out. https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-First-steps-to-tro...

hhasny · 12-22-2023

Hello, FOS version 6.4 and newer version you can have the inspection mode per policy. http://docs.fortinet.com/document/fortigate/6.4.0/administration-guide/366651 The following helps explaining the different explained inspection mode. http://docs.fo...

User Statistics

User Activity

Technical Tip: Outbound Traffic uses VIP IP as SNAT IP

Troubleshooting Tip: FSSO Users do not match firewall policy

Technical Tip: Users are not matching the firewall policy that has active authentication

Technical Tip: No bytes value in web filter traffic logs

Technical Tip: FortiGate is forwarding DNS query for block or ban domain

Re: Allow IPSec traffic port 4500

Re: Fortigate Static ARP , MAC Adress Based IP Filtering

Re: link between public domain and local server

Re: Fortigate 100F Cannot access internet

Re: Flow based or proxy based

Re: link between public domain and local server

Re: Fortigate Static ARP , MAC Adress Based IP Fil...

Re: Fortigate 100F Cannot access internet

Re: Flow based or proxy based

Re: Fortigate IPsec Dial-in behind NAT, no outgoin...

KCS