Just more ramblings of another IT Guy

Category Archives: Fortigate

Change auth-ports on Fortigate

Posted on 22/12/2012 by Googs

When using a a transparent vdom and an identity based policy to authenticate users on non standard ports (i.e. when users are using the explicit proxy on port 8080) it is neccessary to change the ports the Fortigate expects http … Continue reading →

Posted in Fortigate, Tips+Tricks | Leave a comment

Verify ldap bind username used for FSSO

Posted on 21/12/2012 by Googs

A common source of failure for an ldap lookup when using a regular bind is incorrect user cn On the DC verify by running following command dsquery user -name “username”

Posted in Fortigate, Tips+Tricks | Leave a comment

Guest NTLM access (CLI only)

Posted on 16/08/2012 by Googs

Guest profile access may be granted to users failing NTLM authentication, such as visitors who have no user credentials on the network. To allow guest users in NTLM, use the following CLI command: If there are multiple domains, a trust relation … Continue reading →

Posted in Fortigate, Tips+Tricks | Leave a comment

CLI commands to enable encryption between FortiGate and FortiAnalyzer

Posted on 10/07/2012 by Googs

Use the following commands to enable encryption between the FortiGate unit and the FortiAnalyzer unit: On the FortiGate unit: config log fortianalyzer setting set encrypt enable set psksecret <presharedkey_str> set localid <devname_str> end On the FortiAnalyzer unit: config log device edit … Continue reading →

Posted in FortiAnalyzer, Fortigate, Security, Tips+Tricks | Leave a comment

Wan Opt & Web Cache CLI only on certain Fortigates

Posted on 14/05/2012 by Googs

Wan Opt and Web Cache has gone CLI only for certain Fortigate models (See below) since Version 4 Mr3 Patch 4. The removal from the Web GUI is apparently for performance reasons. ask a nurse

Posted in Fortigate, Tips+Tricks | 3 Comments

Realtime upload of logs to FortiAnalyzer

Posted on 12/05/2012 by Googs

By default on Fortigate units with hard drives logs are only uploaded once a day. Units without a hard drive upload in realtime by default. If you would like a hard drive equipped Fortigate to upload logs in Realtime use … Continue reading →

Posted in Fortigate, Tips+Tricks | Leave a comment

FortiOS version 4 mr3 patch6 supported 3G modems

Posted on 11/05/2012 by Googs

Fortinet has published a list of the supported 3G modems for Version 4 MR3 Patch 6 and it can be found here

Posted in Fortigate, Tips+Tricks | Leave a comment

Check Fortigate interface for errors

Posted on 08/05/2012 by Googs

You can use the following command to check a Fortigate interfacefor any possible errirs that may affect traffic performance # diagnose hardware deviceinfo nic <port_name>

Posted in Fortigate, Tips+Tricks | Leave a comment

Fortinets Irish support number

Posted on 03/05/2012 by Googs

Fortinet have setup an Irish support number which means calls to france are no longer required. While the calls are routed to the same location the costs go down. The number for Fortinet is 1800 309 150 .

Posted in Fortigate | Leave a comment

Determine FortiAP when not connected to Fortigate

Posted on 20/03/2012 by Googs

When faced with the need to determine what version of firmware a FortiAP is running with connecting it to a Fortigate, connect to the FortiAP via the console and run the following command “fap-get-status”

Posted in Fortigate, Tips+Tricks | Leave a comment