Description This article describes that is not possible to access
certain websites when Web Filter (or any security profiles) is enabled
in Explicit Proxy policy. When the Web Filter is removed from the
policy, the website is accessible. This can be ...
Description This article describes how to check the SSH encryption
algorithm on FortiGate using Nmap on Windows. Scope Any version of
FortiGate. Changing the SSH Encryption Algorithm on FortiGate is only
possible from v7.0.2 and above. Download Nmap ...
Description This article describes how to configure FortiGate FSSO
TSAgent with FortiAuthenticator as the Collector Agent. Scope
Components: FortiGate (FGT for short) – uses the FSSO information.
FortiAuthenticator (FAC for short) – FSSO Collector Ag...
Description This article describes how to configure a Remote User
(LDAP/RADIUS) as a FortiAuthenticator Administrator. Scope
FortiAuthenticator and a Remote Authentication Server. Solution Step 1:
Add the LDAP server to FortiAuthenticator. On the For...
Description This article describes that is not possible to add a VLAN
interface into the interface zone. An Interface Zone is also known as a
Dynamic Object. Scope FortiGate version that is NOT End of Support.
Solution This can happen if a user sudde...
When upgrading firmware in a Fortinet Security Fabric as such, please
refer here to see which devices in the fabric should be upgraded first:
https://docs.fortinet.com/document/fortigate/7.4.3/fortios-release-notes/936594/fortinet-security-fabric-upg...
Please ensure that your SAML attributes are configured correctly on both
Fortigate (SP) and on Azure (IDP) as they are very easy to misconfigure.
To me, that looks like a potential issue during the saml redirection,
not an issue with FortiClient. You...
As your partner service aka Destination is a dynamic ip that's always
changing, you can create a wildcard fqdn object and use that as the
Destination Address of the firewall policy:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-a-wi...
https://docs.fortinet.com/compatibility-tool/fortimanager When FortiOS
is mentioned, it refers to FortiGate firmware version.
https://docs.fortinet.com/document/fortiswitch/7.4.2/fortilink-compatibility
For this, this is the firmware version compatib...
could you please attach a diagram of your topology? looking at your
sniffer it seems like this is your traffic flow. user -> edge switch ->
fortigate -> core switch -> wan switch --> internet. In this network,
the fortigate, core switch and wan switc...