Re: Setting up FortiGate Web Authentication and SA...

Ade_23 · 02-17-2025

Description This article is a guide on providing read-only access to UTM profiles and nothing else on the firewall. Scope All FortiOS versions. Solution In some environments, it may be required to give read-only access to the Security profiles (UTM) ...

Ade_23 · 01-14-2025

Description This article describes what to do when an intrusion prevention scanning failure is seen on devices behind a FortiGate or FortiProxy device. Scope FortiGate, FortiProxy. Solution It is possible to get the following error message when tryin...

Ade_23 · 11-27-2024

Description This article describes how to resolve the 'Domain not available' error when trying to create a FortiDDNS entry. Scope All FortiGate models (except model1000-series or higher or VMs). Solution When creating a FortiDDNS entry, it is possibl...

Ade_23 · 11-20-2024

Description This article describes why a WAN interface configured in DHCP mode will take precedence over a WAN link in static mode by default. Scope All FortiGate OS versions and models. Solution By default, the FortiGate prefers WAN interfaces in DH...

Ade_23 · 10-31-2024

Description This article describes how to use SAML outbound authentication for a user-based NAC policy to assign client devices to a VLAN on a FortiGate managing FortiSwitches. Scope FortiOS 6.4 and above. Solution There are existing articles and doc...

Ade_23 · 10-31-2024

Hello @heyyo, Here is an article on enabling the sdwan interface: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-and-disable-SD-WAN-options/ta-p/193768 Do you have any interfaces in that zone as asked by @Ricky?

Ade_23 · 10-17-2024

Hello julianhaines, First of all, you do not need a rule to allow traffic in for SAML authentication. Please run a saml debug on the FortiGate to see if you get any output.? Also, please enable captive portal with IP 0.0.0.0 under authentication sett...

Ade_23 · 08-30-2024

Hello @boneyard . The short answer is No. there is no way to see the number of hits for routing objects. The best way to see if they are working is by the effect of their application.

Ade_23 · 08-16-2024

Hello, You cannot use the same SSO instance for SSLVPN and outbound authentication on the same FortiGate. They would have to be two different instances.

Ade_23 · 08-07-2024

Set up an ip pool for that internal box using the wan interface IP and see if it works

User Statistics

User Activity

Technical Tip: Create an Admin account with just read-only access to UTM profiles.

Technical Tip: Intrusion Prevention Scanning Failure

Troubleshooting Tip: How to resolve FortiDDNS 'Domain not available' error when switching between devices

Technical Tip: WAN interface in DHCP mode takes routing precedence over WAN interface with static configuration

Technical Tip: Setting up a user-based NAC policy using SAML outbound authentication (with Microsoft Entra ID)

Re: SD-WAN Zone (virtual-wan-link) with Disabled Status