Re: FortiNAC deployment

AEK · 05-08-2024

Hi FortiWeb adminsI have a fresh FortiWeb 7.2.8 installation, protecting a Web server for mobile applications.Public certificate correctly installed on FortiWeb with certificate chain.I have the following behavior:When Web server is protected by Fort...

AEK · 05-07-2024

HelloI found nothing documented regarding ZTNA server path regular expression.Anyone knows how to use it?

AEK · 05-06-2024

Hi FortiGate adminsI have two hosts interconnected via a third party IPsec, separated by a FortiGate.When I use no-inspection in the FG's firewall policy I have the tunnel comes up and working fine.When I use certificate inspection it doesn't come up...

AEK · 05-02-2024

Hi FortiMail integratorsWhat are the "recommended" method(s) to migrate a configuration from FML hardware to FML VM?

AEK · 04-29-2024

Hi FortiWeb adminsWhen I create a user group on FortiWeb 6.3.x from RADIUS I can't specify which RADIUS group. It means the group contains all RADIUS users.Is it a limitation of 6.3.x or did I miss something?

AEK · 05-08-2024

I think the response is yes and no.In case the "bad" client is trying to access through a known bad gateway/proxy then this should be blocked using "IP Reputation" filter of the "Web Protection Profile".Otherwise I don't see how FortiWeb can block su...

AEK · 05-08-2024

HiIn addition to Atlas' suggestion, as alternative you should be able to achieve this using use virtual wire pair.https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/166804/virtual-wire-pair Or transparent VDOM.https://docs.fortin...

AEK · 05-08-2024

Hi SheerazIf I understand well your requirements, you have to do as follows:Forward HTTP/HTTPS traffic to FortiWeb (using VIP on your Firewall)Forward other traffic from IPsec directly to the back-end server (do not forward to FWB)So:IPsec tunnel byp...

AEK · 05-08-2024

Hi NeoRantIf you enabled https access on DMZ and didn't work then I guess it is a routing issue.As per my knowledge FortiMail doesn't have policy routes, so if you configure multiple interfaces you may have some issues when accessing from the interfa...

AEK · 05-08-2024

Hi MuriI think FortiGuard filter would have blocked such e-mail.Under FortiGuard section, enable IP Reputation, and enable primary URL filter and set it to the "default" URL profile.

User Statistics

User Activity

Mobile application showing certificate error

ZTNA server path regular expression

IPsec phase1 negotiation failes due to certificate inspection

FortiMail config migration

FortiWeb RADIUS group

Re: Do Fortinet AWS WAF Rule Groups cover IP Spoofing

Re: L2 Traffic Forwarding

Re: Assistance Required for FortiWeb in (Reverse Proxy)

Re: Fortimail DMZ login

Re: FortiMail - "Your password expires today" SCAM

Re: FortiNAC deployment

Re: Fortinac Agent Not Active

Re: Inter VLAN routing

Re: Firewall or Anti Virus.

Re: FortiNAC - Profiling Static IP Devices

Re: Forti High Availability using different hardwa...

Re: How packets find their way back to a Users SSL...

Re: Recipient Verification

Re: Configuring FortiMail to Filter Incoming Email...

Re: How to configure the icons inPredefined Intern...