Questions tagged [fortigate]

firewall appliance made by fortinet - includes capwap wireless controller and fortios software

The FortiGate is a rack-mount next-generation firewall appliance with built-in managed switch ports and wireless CAPWAP controller for FortiAP access points. Manufacturer is Fortinet and device software is FortiOS.

More information about Fortinet on Wikipedia and specifics about the FortiGate product on official Fortinet site.

106 questions
0
votes
1 answer

IPsec VPN between Fortigate 60C and openswan up, but no traffic

I get visual confirmation that the tunnel is working from the fortigate GUI but, it also says i don't have 1 byte of traffic, the linux server also confirms the tunnel is open but i can't ping nowhere, my conn conn office #left side is home …
0
votes
0 answers

site not reachable after firewall reboot

After rebooting my Fortigate firewall, I can no longer reach a specific website from within the internal lan (I'd better say from a specific public ip since all the machines belonging to the internal lan expose themselves on the internet through a…
hal
  • 1
0
votes
1 answer

Not able to connect to GitHub though the Firewall

We have Fortigate Firewall install on the network, What port I should open to connect to the GitHub repository using the https:// protocol. I found a similar question , And allowed the port suggested but still not able to push, pull etc. showing…
Irk
  • 171
  • 1
  • 6
0
votes
0 answers

Fortigate - cannot ping public IP in dual WAN ISP setup

I have a fortigate 100c that is configured with 2 WAN ISP's LAN1 -------------- ISP 1 (static pub 1.1.1.1) |-FORTIGATE-| LAN2 ---------------ISP 2 (dynamic pub 10.1.1.1) I have policy routes configured to both private LAN's and I have no…
nenzki
  • 1
  • 1
  • 1
0
votes
1 answer

Fortigate 100D - L2TP range

I need a specific number of hosts connected on Fortigate with L2TP/IPsec, about 300. I tried to configure this range via console config vpn l2tp ... set sip 10.0.0.1 ... eip 10.0.1.254 It says that network should be /24 and this way i can't connect…
Simão
  • 1
  • 1
0
votes
1 answer

Fortigate Firmware Upgrade

I've two Fortigate 40C here, which are currently running on firmware "Fortigate-40C v4.0,build0639,120906 (MR3 Patch 10)". I want to upgrade to the latest MR3 release, which appears to be MR3 Patch 18. I logged into my account and downloaded the…
Kyle
  • 1
  • 2
0
votes
0 answers

Fortigate VM Logs

I have a Fortigate VM v5.2.0 I have setup VPN like described here Fortigate IPsec VPN for iOS I can logon with iOS and I see in Local Traffic Log the connection: Pic1 But when I try to browse a denied website I don't see any blocked traffic and I…
Sinista
  • 85
  • 1
  • 2
  • 9
0
votes
1 answer

Fortinet Fortigate software switch configured IP not accessible

I'm trying to get a software switch configuration working on a Fortigate 100D. It appears like devices plugged into the software switch ports can communicate between each-other, but they cannot reach the IP configured for the software switch…
Mister_Tom
  • 446
  • 1
  • 10
  • 19
0
votes
1 answer

FortiGate 80c port forward

I have a FortiGate 80c and I'm getting at a lost on how to port forward to get my OpenVPN service accessible externally. I did setup the VirtualIP assigning tcp 1194 on the internal IP to the external one. I did a firewall policy about this : ACCEPT…
vn.
  • 375
  • 2
  • 10
0
votes
0 answers

Fortigate 80C multi wan

I've Fortigate 80c and two internet lines from two separate ISPs. I'm trying to distribute sessions between both internet lines following http://docs-legacy.fortinet.com/cb/html/index.html#page/FOS_Cookbook/Install_advanced/routing_ecmp_basic.html ,…
emamdouh
  • 1
  • 1
0
votes
0 answers

Debugging IPSEC log

A Fortigate unit and a Openswan based Linux server. Tunnel is up but no data goes through. This is the log from the Forti unit: Line 204: ike 0:Brazil_VPN:2803378:19809969: responder received first quick-mode message Line 205: ike…
JustAGuy
  • 629
  • 3
  • 18
  • 35
0
votes
0 answers

Fortigate VPN can't reach site

I've two Fortigate's here and I use one of them for each site. Site A Site B 192.168.2.0/24 <---------- VPN --------> 192.168.10.0/24 The…
Paul
  • 21
  • 1
  • 7
0
votes
2 answers

Fortigate 224b interfaces reappearing and can't be (re)deleted

About two years ago I created a few hardware switch interfaces for testing when I first purchased this unit. I deleted them shortly thereafter and there was nothing amiss. Made changes to the configuration, including a couple of firmware updates and…
Local Needs
  • 121
  • 1
  • 4
0
votes
1 answer

Fortigate Identity Policy and Custom Services

Is it me or is it impossible to have the user\pass portal for services there are NOT pre-defined in Fortigate? I've been trying for a few hours to force anyone who tries to access a certain server on port 8080 to get that portal but for some reason…
JustAGuy
  • 629
  • 3
  • 18
  • 35
0
votes
1 answer

Does Fortigate 100A support IPv6?

Tried searching through the net but couldn't find any info since the product is already discontinued. Can anyone confirm if this particular product supports IPv6?
mfmz
  • 169
  • 1
  • 1
  • 6