Hello Everyone,Todays morning wasnt as good as yesterday. I just have
been triggered that FortiWeb 600D has high CPU usage and some services
arent running. So I started SSH session to check basic debug commands
and saw that "7402m 46.6 0 77.5 /bin/pr...
Hello,Gotta question regarding ssl certificate and SNI configuration. Im
gonna use SNI solution, do I need to setup "certificates" on main page
when creating main policy? please see screenshot. From my point of view
no, cuz all certs info will be poi...
Hello,Im trying to figure out if I am able to see if X-Forwarded-for
header is being really forwarded to destination server. I did try those
debug commands: diagnose debug resetdiagnose debug timestamp
enablediagnose debug flow filter server-ip 10.14...
Hello, Im struggling with FortiAuthenticator and MAC bypass, cant make
it work, I did read documentation, but havent found solution. My
scenerio is very simple, (PC)->[TPlink_SW]->[FAC]. All are in the same
network - its all for tests only.EAP-TLS us...
Hello, I havent seen such weird behavior on FGT before. I have S2S VPN
with another location where there is some Local network - all is working
good with s2s, but the problem is with local asset. After sometime one
of IP is unreachable.Debug commands...
Yeap I did try. Sure thats one of solution it showed me already. But i
was hoping that maybe, I could see it in the debug logs directly without
disabling ssl or decryption traffic. :)
Hi AEK,thx for answer - of course X-Forwarded-for is working, but I just
wanna have a proof from WAF that it was actually forwarded. :) Otherwise
I must rely on the other side.
Oh Thx, I'll take a look at it. May I ask you what exactly should I put
into EAP-MSG? You mean type of auth request? or just
EAP-MD5?TPlink(unfortunately) is not capable to choose which protocol
could be used for MAB. I can use PAP or EAP - There is ...