Technical Tip: Wireless Authentication using SAML ...

CarlosColombini · 01-01-2024

Description This article describes the new settings required for SSL VPN Azure AD Auto Connect when FortiGate is running v7.4.2 or higher. Starting with v7.2.1, Azure AD domain joined machines are capable of automatically connecting to an SSL VPN tun...

CarlosColombini · 11-26-2023

Description This article provides the lists of resources related to ZTNA Access proxy and ZTNA IP/MAC Control applied to various features in FortiGate. It has been organized in six sections that cover ZTNA usage in: ZTNA Resource Center. EMS and Fort...

CarlosColombini · 11-26-2023

Description This article describes a possible cause of ZTNA proxy or firewall policies failing to match when SAML authentication method is used.This issue is likely to be triggered when FortiAuthenticator is configured as SAML IdP. Consider a scenari...

CarlosColombini · 11-26-2023

Description This article describes a possible cause of ZTNA proxy or firewall policies failing to be matched if Geography IP Address object is used as source.Geography Address objects are commonly used to restrict access to certain countries for cert...

CarlosColombini · 11-26-2023

Description This article describes a possible cause of ZTNA Tags not synchronizing to FortiGateIf object tagging has been configured and any entries other than the 'default' have been created, ZTNA Tags may fail to be synchronized from FortiClient EM...

CarlosColombini · 08-08-2023

Hi Allan, You are correct. The fix is to allow for ZTNA tags to be synchronized across all vdoms and firewalls. Regarding the NAT being disabled after policy changes, I have already reported that to Development as well. A proxy policy can be used wit...

CarlosColombini · 08-08-2023

For more clarity, please review the article below and track Known Issue ID 849073 in future FortiOS release notes.https://community.fortinet.com/t5/FortiGate/Technical-Tip-Behavior-of-ZTNA-Tags-shared-across-multiple-vdoms/ta-p/266371Thank you, Carlo...

CarlosColombini · 07-29-2023

Hi aguerriero, Thank you for raising a case with TAC. I am sharing here so others can benefit from your post.Development confirmed this is a known issue registered under ID 849073 where ZTNA Tags shared across vdoms will not work. This issue affects ...

CarlosColombini · 08-15-2022

Hi @goenacc, I just came across this post and thought I would share if it had not been done from your TAC ticket, but this is a known issue investigated under BUG ID 705880 - Update user group with SAML user will update firewall policy, which is fixe...

User Statistics

User Activity

Troubleshooting Tip: Unable to connect to SSL VPN using Azure Auto Connect after FortiOS firmware upgrade to v7.4.2

Technical Tip: ZTNA - Zero Trust Network Access Resource List

Technical Tip: Unable to match ZTNA proxy policy or ZTNA firewall policy when SAML authentication is enabled

Technical Tip: Unable to match ZTNA Proxy Policy of ZTNA Firewall Policy when Geography IP is used in source address field

Technical Tip: ZTNA Tags fail to synchronize between FortiClient EMS and FortiGate

Re: ZTNA Multple Access Proxies and VDOM mode

Re: ZTNA Multple Access Proxies and VDOM mode

Re: ZTNA Multple Access Proxies and VDOM mode

Re: SSLVPN with Azure SAML

Technical Tip: Wireless Authentication using SAML ...

Technical Tip: Restrict SSL VPN and Dial-up IPsec ...

Technical Tip: FortiGate SAML authentication resou...

Technical Tip: FortiClient Caching SSL VPN SAML Au...

Technical Tip: ZTNA TCP Forwarding Access Proxy (Z...

KCS