Re: FSSO with polling mode guideline

rmreddy · 02-07-2025

Description This article describes how a policy route behaves when there is a policy route configured with destination 0.0.0.0/0. Scope FortiGate. Solution If there is a policy route created with the destination as 0.0.0.0/0, then all the traffic wil...

rmreddy · 01-23-2025

Description This article describes how to upgrade the firewall if the VDOM is enabled. Scope FortiGate. Solution There is speculation that if VDOM is enabled, it needs to upgrade the firmware to the specific VDOM and it does not apply to all VDOMs. F...

rmreddy · 12-06-2024

Description This article describes how to move the authentication rule to the top and the bottom in SSL VPN. Scope FortiGate. Solution To view authentication rules, it is necessary to execute the below commands. config vpn ssl settings config authent...

rmreddy · 11-01-2024

Description This article describes how traffic flows when NAT is enabled in the IPv4 policy. Scope FortiGate. Solution When NAT is enabled in the IPV4 policy, the traffic will get NATted to the IP of the destination interface and will be forwarded to...

rmreddy · 11-01-2024

Description This article describes why it is impossible to configure a hardware/software switch, VLAN interface as both an HA monitor and heartbeat interfaces. Scope FortiGate. Solution Port9 is configured as a software switch, and a test VLAN interf...

rmreddy · 02-17-2025

Hi, looks like it is a bug in v7.4.7, please reach TAC.In v7.6.x able to create.

rmreddy · 01-23-2025

Hi, If not looking to install FSSO agent in the server, follow the below link for your reference. https://docs.fortinet.com/document/fortigate/7.6.1/administration-guide/888827/poll-active-directory-serverIf want to install FSSO agent but not DC agen...

rmreddy · 01-21-2025

HiPlease go through the below link for your reference.https://community.fortinet.com/t5/FortiGate/Technical-Tip-FSSO-Agent-in-polling-mode/ta-p/228136

rmreddy · 06-21-2023

Hi, As you are configuring for SSLVPN using MAC based Please follow the below link for your reference how to restrict VPN based on MAC address.https://community.fortinet.com/t5/FortiGate/Technical-Tip-MAC-Address-check-on-SSL-VPN-connections/t... How...

rmreddy · 06-21-2023

Hi, However, if you are looking for normal IPV4 policy, you can refer the below link for your reference where special licensing is not required.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-the-MAC-address-based-polici...htt...

User Statistics

User Activity

Technical Tip: Policy route behavior when there is a policy route configured with destination 0.0.0.0/0

Technical Tip: How to upgrade firewall if VDOM is enabled

Technical Tip: How to move authentication rule to top and to bottom in SSL VPN

Technical Tip: How traffic will be forwarded when NAT is enabled in IPv4 policy

Technical Tip: It is impossible to configure a hardware/software switch, VLAN interface as both HA monitor and heartbeat interfaces

Re: IPV6 FQDN objects can't be added to SD-WAN rules